last executing test programs:

1.192579868s ago: executing program 1 (id=5440):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='net_prio.prioidx\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x1000002, 0x28011, r0, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x2000)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x62, '\x00', r3, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x20000400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r9, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r6, 0x25, 0x2, @void}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0xb, 0x9, 0xa, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x40, 0xa0d, 0xfffffffb}})
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0xb4, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x5b15}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0xe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2a}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x59}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8}, 0x10004044)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r11, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r11, 0x894b, &(0x7f0000000080))

1.053193041s ago: executing program 1 (id=5443):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0)
close(r4)
write(r2, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000003, 0x80010, r5, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x22a000, 0x1000, 0x1000, 0x2698431168823581}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0)
sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000840)={0x30, 0x2e, 0x503, 0x40000, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}]}, 0x30}], 0x1}, 0x20000000)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000380)={'sit0\x00', &(0x7f00000002c0)={@remote, 0x0, 0x0, 0x80, 0x0, [{@multicast2}, {@multicast2}, {@loopback}, {@multicast1}, {@local}, {@initdev}, {@remote}, {@remote}]}})
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x4000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x8}, 0x94)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x10})
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000040)={0x2, 0x40, 0x5, 0x4, 0xd, 0x16, 0x9, 0x40, 0x4, 0x7, 0x4, 0x2, 0xd6, 0x8}, 0xe)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={<r8=>0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0xdcdf, @loopback, 0xffff}]}, &(0x7f0000000100)=0x10)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a140068c1769d00000c0a0000000000000000a05ee4b0a8174bef9e1c45cabe4734ed00000a00000714000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000180)={r8, @in={{0x2, 0x4e21, @empty}}, 0x9, 0x3}, &(0x7f0000000080)=0x90)
socket$kcm(0x2, 0xa, 0x2)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c094}, 0x0)

774.47104ms ago: executing program 0 (id=5453):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x58, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x58}, 0x7ffffffe, 0x0, 0x0, 0x10}, 0x0)

772.837698ms ago: executing program 0 (id=5454):
unshare(0x400)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0x0, 0xf}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}]}}]}, 0x38}}, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0x0)

678.162485ms ago: executing program 0 (id=5455):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
unshare(0x2c060000)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r1 = socket$nl_route(0x10, 0x3, 0x0)
close(0x4)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071109b00000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRESOCT=0x0, @ANYRES32=r2, @ANYRESOCT=r3, @ANYRES32=r5], 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRESOCT=0x0, @ANYRES32=r2, @ANYRESOCT=r3, @ANYRES32=r5], 0x50)
r7 = socket$packet(0x11, 0x3, 0x300)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000001380)=ANY=[@ANYRES8=r3, @ANYRES32=r6, @ANYRES32=r0, @ANYRES8=r3, @ANYRES8=r2], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000140)=r8, 0x4)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8=r5], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) (async)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8=r5], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f80)={r9, 0x5, 0x145, 0x0, &(0x7f0000001000)="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", 0x0, 0xcfc, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffff1}, 0x50)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000060a0102000000000000000005000900000000001100010000000000000000000100000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000060a0102000000000000000005000900000000001100010000000000000000000100000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2) (async)
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000aaaaaaaaaa30ffffffffffff08004500005400002f907886dd004090788206068128e081cd134a318536459f4c07660000000000000000000000000000000000000000000080f6d65e2d6015a6749554c6253275f500"/102], 0x66)
r12 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x12, 0x80800)
sendto$x25(r12, &(0x7f00000000c0)="a8c4d5bf4d812170d4ea53f046e3abb5e94a4fc9806d4046f34235efab60499f9c73df120f16df535df1edeee04592b88ecce0e40fb83625d7e7274ea32d", 0x3e, 0x400c007, 0x0, 0x0)
r13 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r13, &(0x7f0000000c40)={0xa, 0x4, 0xfffffffd, @loopback}, 0x1c) (async)
bind$inet6(r13, &(0x7f0000000c40)={0xa, 0x4, 0xfffffffd, @loopback}, 0x1c)
sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80008010}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="a80000000b06010400000023000000000a0000043800078005000700210000000c00194000000000000000080c0018400000000000000a3808000840000000000c001940000000000000000954000880100007800c00018008000140ac1414bb1c0007801800168014000240fc0200000000000000000000000000010c00078008000a40ffff80000c00078008000a40000000000c00078008000840000000000800094000000003"], 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async)
sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80008010}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="a80000000b06010400000023000000000a0000043800078005000700210000000c00194000000000000000080c0018400000000000000a3808000840000000000c001940000000000000000954000880100007800c00018008000140ac1414bb1c0007801800168014000240fc0200000000000000000000000000010c00078008000a40ffff80000c00078008000a40000000000c00078008000840000000000800094000000003"], 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x40)

405.031273ms ago: executing program 0 (id=5456):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000002bc0)=ANY=[@ANYBLOB="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"/400], 0x190)

404.836287ms ago: executing program 0 (id=5457):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf252b000000180001801400020076657468305f746f5f626174616476"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040)

354.396856ms ago: executing program 0 (id=5458):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x9}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x338)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x8000000010, 0x2, 0x0)
write(r2, &(0x7f00000002c0)="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", 0xfc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x1641, @private2, 0xfffffff9}}, 0xfff, 0x9}, &(0x7f0000000200)=0x90)
sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
setsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f0000000200), 0x4)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010100}})
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x5, 0x3, 0x8, 0x6})
r7 = socket(0xa, 0x1, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000017c0)={0x3c, r9, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4)

353.737274ms ago: executing program 2 (id=5460):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', <r1=>0x0}) (async, rerun: 64)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$qrtr(0x2a, 0x2, 0x0) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in=@private=0xa010100, 0x4e1f, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff, 0x0, 0xffffffffffeffffa}, {}, 0x4, 0x0, 0x1, 0x0, 0x1, 0x2}, {{@in=@multicast1, 0x4d2, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xd, 0xfffffffe, 0x3}}, 0xe8) (async)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c)
connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) (async)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0)
r6 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) (async)
getsockname$packet(r6, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x55) (async, rerun: 32)
connect$qrtr(r6, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0x2}, 0x62) (rerun: 32)
writev(r5, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) (async, rerun: 32)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000020015f500"/19, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES64=r1], 0x50) (async)
r8 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)={0x80000018})
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) (async, rerun: 32)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000301010400000000000000000200000024000180"], 0x38}}, 0x0) (async)
close(r9)
syz_emit_ethernet(0x8e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaa25aae0cb3fd0a2ea4e01aaaaaaaaaa4305400f008000650000082e90780a01010164010102864e000000030008094ac467ec3f00124c985e594ee96c2b09f6e55ec84c916e05052450b2070ce17393606d00a7ab3c13010dcee8f17fabc8f286afabb207106549c337b0e2fdba29f02c960c99891be6ac141425ac1414aa64010100ffffffffe00000"], 0x0) (async)
r10 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r10, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=[@init={0x18, 0x84, 0x0, {0xffff, 0x7, 0x7, 0x4}}], 0x18, 0x20000001}, 0x20008000)

275.107417ms ago: executing program 2 (id=5461):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa81000e0086dd6d002008004d11ff20010000000000000000000000000001ff0200000000000005000000000000014f194e20009c90780100000003000000786b8afe8ef6c8e90c1e350689fcd4d61b4576015011084c54b22430637a2838563c918774ee22ce2bb8f46f7373cb97218dd5ee5af3108bd6d195c614d44230e598e0731465bf4fcdfa004c93ce4b4e02833533ce8152a09040f08bd2892b7233376dcda3f0b6962e66f6172e7c8cbccc480860f94cd609888bc51a59aef8a8000000000000000020000000"], 0xd6)

163.747939ms ago: executing program 2 (id=5462):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x15, 0x0, &(0x7f0000000280))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r1)
sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="65571bbd700075dbdfe3bb040030"], 0x14}, 0x1, 0x0, 0x0, 0x4481}, 0x24004052)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000010000000700000000005ebf", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000008000"/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff0000b213bfa200000000000007020000f8ffcbffb70300000000008500000001"], 0x0, 0x653, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58)
r8 = socket$inet(0x2, 0x802, 0x1)
connect$inet(r8, &(0x7f0000000400)={0x2, 0x0, @empty}, 0x10)
write(r8, &(0x7f0000000080)="08008edf773c8000", 0xfd)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x117, 0x5, 0x0, 0x6)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000015c0)=ANY=[@ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="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", @ANYRESOCT=r6, @ANYRESOCT=r5, @ANYRES8=r8, @ANYRESOCT=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x48094)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2a0006006b1d4916665a75f5e0007c0a879381236e8b5148fdc7902b013eee56fb8a47843dc2c8c9352b77a80a158969935926a8c97b5ed2b0fbd22175", @ANYRESDEC=0x0, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r13 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
readv(r13, 0x0, 0x0)

162.635649ms ago: executing program 1 (id=5463):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff202000000002000aac14140ce011006a49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="f5af25bd7000000000000e00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', r3, 0x29, 0xff, 0x4a, 0x3, 0x60, @loopback, @empty, 0x81, 0x20, 0xfffffff3, 0x5}})

117.853634ms ago: executing program 2 (id=5464):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201f02400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}}, 0x8000)

54.877179ms ago: executing program 1 (id=5465):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000140)={0x61e1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e21, @remote}}}, 0xffffff6e)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000010100080400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002800400338008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41100000000000000290000003b000000", 0xfe60) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r4, 0x2000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0x806000) (async)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r5, 0x7ca8e000) (async)
writev(r6, &(0x7f0000000080)=[{0x0}], 0x1) (async)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r8, 0x400, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40005) (async)
syz_emit_ethernet(0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="1b80c200000eaaaaaaaaaabb000442fe87a90e"], 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='G\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd70000000000036000000080073000000000008000300030000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x44}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840)

54.661032ms ago: executing program 2 (id=5466):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x8, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000380)={{r0}, &(0x7f0000000300), 0x0}, 0x20)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000714010000000000000000000500600004"], 0x18}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x401, 0xffffffff, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x268e}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x4}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x1ff}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$sock_netdev_private(r2, 0x89f9, &(0x7f0000000180)="52ebeda4949fc6281f61983a1e022bdeb8b001f574b786c3f023a2c93d77c972de08787c8b2162b457aaa4f5ff1632e2e031d3776f6d93ea9c782983c4e2cd79d3e04bd3d0f76403c93b3d7a4b5c0c60723f854754b199f8f69e39ed5ef800bffc9cff3d4289624de6a1d0db2cd98d337f83cbf866fa594d7373b92a9456a7237e1d55f499b3f6d58f805ce2c7987340d99a83cd16713e11679311446944faebc36d4d481655e69585d6c48faf1526a63ae46262f0a25c50f3ef6fe75607ea9df4896be1facbd3fabb490e8c6e6e")

54.421966ms ago: executing program 1 (id=5467):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x8)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xffffffffffffff6f)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x44, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x23ea5d1b09597025, 0xd}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010)

1.385965ms ago: executing program 2 (id=5468):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002"], 0x1f0}}, 0x2000c000)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1c8, 0x1, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_NAT_DST={0x68, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x5, 0xa, 0x7fff]}, @CTA_ID={0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_TUPLE_MASTER={0x60, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x5}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xc}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1ff}, @CTA_TUPLE_MASTER={0x28, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x34, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x26}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x200}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xc}, @CTA_PROTOINFO_DCCP_ROLE={0x5}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x7}]}}, @CTA_NAT_SRC={0x64, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00'}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}]}]}, 0x1c8}}, 0x400a000)
r1 = socket(0x2a, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x4000, 0x4, 0x200, 0x3, 0x8, 0x0, 0x10000000, 0x4, <r2=>0x0}, &(0x7f0000000040)=0x20)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={<r3=>r2, 0x0, &(0x7f0000000080)}, &(0x7f0000000100)=0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRES64=r3], 0x0, 0x37}, 0x28)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r5}, 0x8)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4401000010000100fefffffffddbdf25fe8800051a0000000000000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x2c, 0x2c, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xf, 0xc}, {}, {0x1c, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0xf7}}]}, 0x84}, 0x1, 0x0, 0x0, 0x41bd31d4576420eb}, 0x8851)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x0, 0x3, 0x80, 0xf}, {0x5, 0xb0, 0x4, 0x1}, {0x3, 0x2, 0x3, 0x8000}, {0x7, 0xf, 0x8, 0x723dde45}, {0x400, 0xfa, 0x3, 0x1}, {0x3, 0xe5, 0x4, 0x7fff}, {0x2, 0x2, 0x1, 0x527bc1ad}]}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xcdb281c69b69ad50}, 0x4000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

0s ago: executing program 1 (id=5469):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa81000e0086dd6d002008004d11ff20010000000000000000000000000001ff0200000000000006000000000000014f194e20009c90780100000003000000786b8afe8ef6c8e90c1e350689fcd4d61b4576015011084c54b22430637a2838563c918774ee22ce2bb8f46f7373cb97218dd5ee5af3108bd6d195c614d44230e598e0731465bf4fcdfa004c93ce4b4e02833533ce8152a09040f08bd2892b7233376dcda3f0b6962e66f6172e7c8cbccc480860f94cd609888bc51a59aef8a8000000000000000020000000"], 0xd6)

kernel console output (not intermixed with test programs):

 unknown, defaulting to 1000
[  309.934995][T16213] netlink: 'syz.0.3326': attribute type 1 has an invalid length.
[  309.977979][T16214] sctp: [Deprecated]: syz.1.3327 (pid 16214) Use of int in max_burst socket option deprecated.
[  309.977979][T16214] Use struct sctp_assoc_value instead
[  310.100384][T16235] nbd: nbd64 already in use
[  310.328939][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  310.331087][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  311.024280][T16263] bridge0: left promiscuous mode
[  311.026305][T16263] bridge0: left allmulticast mode
[  311.368945][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  311.371684][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  311.499115][T16297] syzkaller1: entered promiscuous mode
[  311.500961][T16297] syzkaller1: entered allmulticast mode
[  311.620560][T16302] __nla_validate_parse: 26 callbacks suppressed
[  311.620602][T16302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3353'.
[  312.409079][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  312.411426][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  312.493283][T16319] netlink: 'syz.2.3359': attribute type 1 has an invalid length.
[  312.533425][T16319] bridge31: entered promiscuous mode
[  312.535737][T16319] bridge31: entered allmulticast mode
[  312.545609][T16319] bond45: (slave bridge31): making interface the new active one
[  312.550017][T16319] bond45: (slave bridge31): Enslaving as an active interface with an up link
[  312.606862][T16324] netlink: 840 bytes leftover after parsing attributes in process `syz.2.3361'.
[  312.621987][T16324] netlink: 'syz.2.3361': attribute type 1 has an invalid length.
[  312.635210][T16324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3361'.
[  312.646515][T16327] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3362'.
[  312.724713][T16328] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3360'.
[  312.738586][T16328] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3360'.
[  313.448946][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  313.451691][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  313.469790][T16333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3364'.
[  313.526109][T16342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3368'.
[  313.530349][T16341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3368'.
[  313.764607][T16368] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3374'.
[  313.935037][T16382] netlink: 'syz.0.3382': attribute type 1 has an invalid length.
[  314.233371][T16402] xt_l2tp: invalid flags combination: 8
[  314.235362][T16401] xt_l2tp: invalid flags combination: 8
[  314.489017][    C0] net_ratelimit: 1 callbacks suppressed
[  314.489035][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  314.494056][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  314.502382][T16418] netlink: 'syz.0.3394': attribute type 12 has an invalid length.
[  314.505768][T16418] netlink: 'syz.0.3394': attribute type 11 has an invalid length.
[  314.727042][T16438] netlink: 'syz.1.3401': attribute type 1 has an invalid length.
[  314.762267][T16438] bond25: (slave bridge21): Enslaving as a backup interface with an up link
[  314.774029][T16438] bond25: (slave bridge22): Enslaving as a backup interface with a down link
[  314.778689][T16441] netlink: 'syz.1.3401': attribute type 1 has an invalid length.
[  314.974462][T16453] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4
[  315.022497][T16455] syzkaller1: entered promiscuous mode
[  315.024923][T16455] syzkaller1: entered allmulticast mode
[  315.181824][T16457] bond26: entered promiscuous mode
[  315.528908][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  315.531430][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  315.587870][T16467] batadv_slave_1: entered promiscuous mode
[  315.592292][T16466] batadv_slave_1: left promiscuous mode
[  315.646142][T16477] netlink: 'syz.0.3416': attribute type 1 has an invalid length.
[  315.695236][T16477] bridge40: entered promiscuous mode
[  315.697762][T16477] bridge40: entered allmulticast mode
[  315.704922][T16477] bond44: (slave bridge40): making interface the new active one
[  315.709561][T16477] bond44: (slave bridge40): Enslaving as an active interface with an up link
[  315.757099][T16481] netlink: 'syz.0.3417': attribute type 4 has an invalid length.
[  316.101447][T16504] IPv6: sit2: Disabled Multicast RS
[  316.283690][T16515] netlink: 'syz.0.3430': attribute type 4 has an invalid length.
[  316.487572][T16528] netlink: 'syz.0.3435': attribute type 1 has an invalid length.
[  316.523158][T16528] bridge41: entered promiscuous mode
[  316.524863][T16528] bridge41: entered allmulticast mode
[  316.529561][T16528] bond45: (slave bridge41): making interface the new active one
[  316.532603][T16528] bond45: (slave bridge41): Enslaving as an active interface with an up link
[  316.568894][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  316.571040][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  316.621886][T16540] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  316.666548][T16548] __nla_validate_parse: 79 callbacks suppressed
[  316.666559][T16548] netlink: 212916 bytes leftover after parsing attributes in process `syz.1.3441'.
[  316.725425][T16538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3437'.
[  316.734074][T16548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3441'.
[  316.744220][T16549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3441'.
[  316.744290][T16553] syzkaller1: entered promiscuous mode
[  316.749642][T16553] syzkaller1: entered allmulticast mode
[  316.749936][T16549] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3441'.
[  316.760765][ T8970] batman_adv: batadv2: MLD Querier disappeared - multicast optimizations disabled
[  316.900637][T16559] bridge32: entered promiscuous mode
[  316.902377][T16559] bridge32: entered allmulticast mode
[  316.906791][T16559] bond46: (slave bridge32): making interface the new active one
[  316.910090][T16559] bond46: (slave bridge32): Enslaving as an active interface with an up link
[  316.975612][T16565] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3447'.
[  316.980757][T16565] openvswitch: netlink: Multiple metadata blocks provided
[  316.983804][T16565] netlink: 'syz.2.3447': attribute type 11 has an invalid length.
[  316.988255][T16565] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3447'.
[  317.154453][T16584] bridge33: entered promiscuous mode
[  317.156867][T16584] bridge33: entered allmulticast mode
[  317.168043][T16584] bond47: (slave bridge33): making interface the new active one
[  317.172971][T16584] bond47: (slave bridge33): Enslaving as an active interface with an up link
[  317.178373][T16586] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3451'.
[  317.231348][T16590] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3451'.
[  317.234226][T16590] nbd: device at index 64 is going down
[  317.352253][T16599] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3456'.
[  317.492254][T16610] x_tables: duplicate underflow at hook 1
[  317.499263][T16610] SET target dimension over the limit!
[  317.609168][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  317.612285][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  317.756976][T16634] team0 (unregistering): Port device vlan0 removed
[  317.760004][T16634] team0 (unregistering): Port device bridge21 removed
[  317.763182][T16634] team0 (unregistering): Port device bridge22 removed
[  317.769491][T16634] team0 (unregistering): Port device bridge35 removed
[  317.881909][T16639] validate_nla: 3 callbacks suppressed
[  317.881925][T16639] netlink: 'syz.0.3472': attribute type 4 has an invalid length.
[  317.968350][T16646] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  317.972356][T16646] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  318.107526][T16657] netlink: 'syz.1.3477': attribute type 1 has an invalid length.
[  318.133699][T16657] bond27: entered promiscuous mode
[  318.136297][T16657] 8021q: adding VLAN 0 to HW filter on device bond27
[  318.407908][T16671] nbd: device at index 64 is going down
[  318.648955][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  318.784056][T16693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  319.244652][T16718] netlink: 'syz.0.3496': attribute type 4 has an invalid length.
[  319.338343][T16731] netlink: 'syz.1.3501': attribute type 30 has an invalid length.
[  319.457813][T16747] rdma_rxe: rxe_newlink: failed to add lo
[  319.591980][T16757] netlink: 'syz.1.3511': attribute type 2 has an invalid length.
[  319.616700][T16759] netlink: 'syz.0.3512': attribute type 1 has an invalid length.
[  319.656818][T16759] bond46: (slave bridge42): making interface the new active one
[  319.660940][T16759] bond46: (slave bridge42): Enslaving as an active interface with an up link
[  319.688943][    C0] net_ratelimit: 2 callbacks suppressed
[  319.688955][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  319.692962][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  319.743894][ T8970] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  320.461561][T16762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  320.621729][T16794] netlink: 'syz.1.3522': attribute type 29 has an invalid length.
[  320.625175][T16794] netlink: 'syz.1.3522': attribute type 29 has an invalid length.
[  320.627827][T16794] netlink: 'syz.1.3522': attribute type 29 has an invalid length.
[  320.631024][T16794] netlink: 'syz.1.3522': attribute type 29 has an invalid length.
[  320.729281][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  320.731429][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  320.827560][T16815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  320.830021][T16815] IPv6: NLM_F_CREATE should be set when creating new route
[  320.832583][T16815] IPv6: NLM_F_CREATE should be set when creating new route
[  320.892075][T16818] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  320.905238][T16824] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  320.912370][T16825] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  320.938345][T16824] 8021q: adding VLAN 0 to HW filter on device bond47
[  320.948034][T16824] bond47: (slave geneve5): making interface the new active one
[  320.952878][T16824] bond47: (slave geneve5): Enslaving as an active interface with an up link
[  320.956482][ T8970] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  320.961181][ T8970] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  320.965126][ T8970] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  320.969584][ T8970] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.074490][   T33] audit: type=1800 audit(1778603834.103:9): pid=16839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3536" name=1EE875764FB9143CF12467D72BDD0401AC382504CD2EF80A71999AE6D613F78D21D356641F50EE9654F098469B36836B41518965D085BB0E48DF4AF8474B9FBE03B6426C121C4E0B8AF3EE5071C5847D5B113625A3BC0E83AB6C55BBD6D666FD305C38E8C52D6DBCA9EF59D683136A710C78D45EC49755F6179F85BB8411CA848D1EA3A7030E0A2D076A1CD8E4E9B2AA8DFC232984BB4485AAAAFCC3D93312010D2E604DC69CAE213BE451609C3A82BAFC54AD9BBDA55E7BAB57F37D6034B7BFFF dev="tmpfs" ino=6159 res=0 errno=0
[  321.115823][T16832] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.183534][T16841] trusted_key: syz.2.3537 sent an empty control message without MSG_MORE.
[  321.202178][T16832] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.311127][T16832] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.325625][T16856] lo speed is unknown, defaulting to 1000
[  321.385924][T16832] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.458639][ T8970] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  321.495175][T12471] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  321.512802][T12471] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  321.539222][ T8970] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.544430][T16871] IPVS: set_ctl: invalid protocol: 29 172.30.0.3:20002
[  321.647230][T16878] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20003
[  321.654371][ T8970] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  321.661207][ T8970] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  321.665516][ T8970] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  321.670052][ T8970] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  321.757679][T16889] __nla_validate_parse: 76 callbacks suppressed
[  321.757692][T16889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3553'.
[  321.768895][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  321.771064][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  321.808643][T16898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3554'.
[  321.865867][T16900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3555'.
[  321.889119][T16903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3554'.
[  321.915126][T16905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3557'.
[  321.946100][T16907] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3556'.
[  321.976974][T16898] veth0_vlan: left promiscuous mode
[  321.980096][T16898] veth0_vlan: entered promiscuous mode
[  321.993243][T16898] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  322.001257][ T5075] lo speed is unknown, defaulting to 1000
[  322.008729][ T5075] sqz0: Port: 1 Link ACTIVE
[  322.030192][ T5675] lo speed is unknown, defaulting to 1000
[  322.082636][T16915] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.088179][T16919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3563'.
[  322.126673][T16915] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.193644][T16915] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.235230][T16935] ipt_REJECT: TCP_RESET invalid for non-tcp
[  322.237996][T16915] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.808907][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  322.811172][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  323.044863][T16942] nbd: nbd1 already in use
[  323.047998][T16942] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3573'.
[  323.103544][T16946] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  323.104245][T16947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3575'.
[  323.152974][T16950] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3576'.
[  323.159733][T16950] xt_TCPMSS: Only works on TCP SYN packets
[  323.236183][T16954] ipt_rpfilter: unknown options
[  323.312687][T16956] validate_nla: 58 callbacks suppressed
[  323.312702][T16956] netlink: 'syz.1.3579': attribute type 1 has an invalid length.
[  323.432532][T16963] netlink: 'syz.1.3582': attribute type 1 has an invalid length.
[  323.467995][T16963] bond28: (slave bridge23): making interface the new active one
[  323.473882][T16963] bond28: (slave bridge23): Enslaving as an active interface with an up link
[  323.535154][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  323.552128][T16970] bond29: (slave vcan0): refused to change device type
[  323.560963][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  323.563666][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  323.566362][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  323.661345][ T8970] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  323.675256][ T8970] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  323.703364][ T8970] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  323.726619][ T8970] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  323.784740][T16991] Unknown options in mask 6
[  324.048600][T17005] netlink: 'syz.1.3595': attribute type 13 has an invalid length.
[  324.175650][T17028] syzkaller1: entered promiscuous mode
[  324.182630][T17028] syzkaller1: entered allmulticast mode
[  324.244215][T17031] netlink: 'syz.1.3600': attribute type 4 has an invalid length.
[  324.379401][T16390] block nbd64: NBD_DISCONNECT
[  324.632935][T17064] netlink: 'syz.1.3610': attribute type 21 has an invalid length.
[  324.635857][T17064] netlink: 'syz.1.3610': attribute type 21 has an invalid length.
[  324.829864][T17074] nbd: nbd64 already in use
[  324.888927][    C0] net_ratelimit: 3 callbacks suppressed
[  324.888939][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  324.892914][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  325.263047][T17105] netlink: 'syz.1.3622': attribute type 1 has an invalid length.
[  325.266861][T17105] netlink: 'syz.1.3622': attribute type 9 has an invalid length.
[  325.486996][T17116] nbd: device at index 64 is going down
[  325.513575][T17121] netlink: 'syz.1.3628': attribute type 1 has an invalid length.
[  325.593475][T17121] 8021q: adding VLAN 0 to HW filter on device bond31
[  325.598510][T17121] bond30: (slave bond31): making interface the new active one
[  325.603170][T17121] bond30: (slave bond31): Enslaving as an active interface with an up link
[  325.613460][T17121] bond30: (slave gretap1): Enslaving as a backup interface with an up link
[  325.619381][T17121] 8021q: adding VLAN 0 to HW filter on device bond30
[  325.726984][T17132] ipt_rpfilter: unknown options
[  325.786732][T17136] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  325.874271][T17146] netlink: 'syz.1.3635': attribute type 11 has an invalid length.
[  325.928906][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  325.931131][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  326.597881][T17184] netlink: 'syz.1.3649': attribute type 3 has an invalid length.
[  326.649884][T17189] syzkaller1: entered promiscuous mode
[  326.651830][T17189] syzkaller1: entered allmulticast mode
[  326.774348][T17200] __nla_validate_parse: 43 callbacks suppressed
[  326.774367][T17200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3655'.
[  326.824805][T17205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3656'.
[  326.891967][T17215] xt_hashlimit: size too large, truncated to 1048576
[  326.898991][ T8013] tipc: Node number set to 720148001
[  326.969019][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  326.971911][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  326.991160][T17215] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  326.997660][T17221] syzkaller1: entered promiscuous mode
[  327.001596][T17221] syzkaller1: entered allmulticast mode
[  327.177647][T17233] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3666'.
[  327.184386][T17233] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3666'.
[  327.189186][T17233] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3666'.
[  327.230665][T17237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3668'.
[  327.282835][T17241] bond48: (slave bridge43): making interface the new active one
[  327.285997][T17241] bond48: (slave bridge43): Enslaving as an active interface with an up link
[  327.297520][T17242] bond48: (slave bridge44): Enslaving as an active interface with a down link
[  327.305070][T17241] macvlan4: entered promiscuous mode
[  327.307075][T17241] macvlan4: entered allmulticast mode
[  327.310021][T17241] bond48: entered promiscuous mode
[  327.311735][T17241] bridge43: entered promiscuous mode
[  327.313922][T17241] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  327.317138][T17241] bond48: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  327.322884][T17241] bond48: left promiscuous mode
[  327.324837][T17241] bridge43: left promiscuous mode
[  327.326849][T17250] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3671'.
[  327.329958][T17250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3671'.
[  327.342005][T17242] macvlan4: entered promiscuous mode
[  327.343890][T17242] macvlan4: entered allmulticast mode
[  327.346003][T17242] bond48: entered promiscuous mode
[  327.347731][T17242] bridge43: entered promiscuous mode
[  327.350420][T17242] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  327.353226][T17242] bond48: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  327.353270][T17253] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3674'.
[  327.359128][T17242] bond48: left promiscuous mode
[  327.362859][T17242] bridge43: left promiscuous mode
[  327.373715][T17253] bridge0: port 2(vlan3) entered disabled state
[  327.375902][T17253] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  327.403059][T17253] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3674'.
[  327.407463][T17253] bridge0: port 2(vlan3) entered blocking state
[  327.409582][T17253] bridge0: port 2(vlan3) entered forwarding state
[  327.411897][T17253] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  327.414427][T17253] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  327.421606][T17253] bridge0: port 2(vlan3) entered disabled state
[  327.423800][T17253] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  327.517784][T17264] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  327.915830][T17300] xt_bpf: check failed: parse error
[  328.008958][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  328.011721][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  328.395590][T17332] validate_nla: 3 callbacks suppressed
[  328.395602][T17332] netlink: 'syz.0.3686': attribute type 10 has an invalid length.
[  328.406899][T17332] netlink: 'syz.0.3686': attribute type 10 has an invalid length.
[  328.522737][T17345] bridge0: port 2(vlan3) entered blocking state
[  328.524830][T17345] bridge0: port 2(vlan3) entered forwarding state
[  328.527082][T17345] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  328.529449][T17345] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  328.535507][T17345] bridge0: port 2(vlan3) entered disabled state
[  328.537545][T17345] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  328.583580][T17347] batadv0: entered promiscuous mode
[  328.590933][T17347] batadv0: left promiscuous mode
[  328.721463][T17355] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  328.724291][T17355] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  328.726768][T17355] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  329.048219][T17388] netlink: 'syz.0.3703': attribute type 1 has an invalid length.
[  329.089909][T17388] bond49: (slave bridge45): making interface the new active one
[  329.092948][T17388] bond49: (slave bridge45): Enslaving as an active interface with an up link
[  329.966319][T17452] bridge0: port 1(erspan0) entered blocking state
[  329.971292][T17452] bridge0: port 1(erspan0) entered disabled state
[  329.975964][T17452] erspan0: entered allmulticast mode
[  329.978554][T17452] erspan0: entered promiscuous mode
[  329.989494][T17452] erspan0: left allmulticast mode
[  329.992844][T17452] erspan0: left promiscuous mode
[  330.001532][T17452] bridge0: port 1(erspan0) entered disabled state
[  330.088951][    C0] net_ratelimit: 3 callbacks suppressed
[  330.088967][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  330.094090][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  330.827556][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  330.832466][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  330.836003][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  330.839605][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  331.074726][T17521] netlink: 'syz.0.3751': attribute type 21 has an invalid length.
[  331.077436][T17521] netlink: 'syz.0.3751': attribute type 1 has an invalid length.
[  331.089172][T17521] xt_hashlimit: size too large, truncated to 1048576
[  331.128992][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  331.131810][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  331.394684][T17537] lo speed is unknown, defaulting to 1000
[  331.563437][T17549] bridge0: entered allmulticast mode
[  331.566189][T17549] bridge0: left allmulticast mode
[  331.765040][T17553] xt_hashlimit: size too large, truncated to 1048576
[  331.821610][T17555] ipt_REJECT: TCP_RESET invalid for non-tcp
[  331.826540][T17555] tap0: tun_chr_ioctl cmd 1074025677
[  331.829215][T17555] tap0: linktype set to 768
[  331.966769][T17557] pimreg: entered allmulticast mode
[  331.970176][T17557] pimreg: left allmulticast mode
[  332.076122][T17561] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048)
[  332.156168][T17567] __nla_validate_parse: 29 callbacks suppressed
[  332.156179][T17567] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3765'.
[  332.168919][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  332.171033][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  332.300209][T17580] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3772'.
[  332.347422][T17582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  332.364602][T17582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  332.447862][   T33] audit: type=1107 audit(1778603845.473:10): pid=17593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  332.604763][T17605] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3777'.
[  332.736497][T17613] syzkaller1: entered promiscuous mode
[  332.738314][T17613] syzkaller1: entered allmulticast mode
[  333.131252][T17634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3790'.
[  333.176393][T17634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3790'.
[  333.181371][T17634] nbd: device at index 64 is going down
[  333.208971][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  333.211191][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  333.377586][T17643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3792'.
[  333.390467][T17643] SET target dimension over the limit!
[  333.466236][T17649] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  333.671433][T17669] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3801'.
[  333.711779][T17677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3803'.
[  333.942533][T17694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3810'.
[  333.950153][T17694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3810'.
[  334.032474][T17703] netlink: 'syz.2.3813': attribute type 11 has an invalid length.
[  334.045856][T17703] syzkaller1: entered promiscuous mode
[  334.052181][T17703] syzkaller1: entered allmulticast mode
[  334.236522][T17716] syzkaller1: entered promiscuous mode
[  334.238401][T17716] syzkaller1: entered allmulticast mode
[  334.353530][T17718] lo speed is unknown, defaulting to 1000
[  334.360708][T17718] lo speed is unknown, defaulting to 1000
[  334.377131][T17718] lo speed is unknown, defaulting to 1000
[  334.387691][T17718] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  334.400051][T17718] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  334.419192][T17718] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  334.434061][T17718] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  334.464172][T17718] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  334.500138][T17718] lo speed is unknown, defaulting to 1000
[  334.509900][T17718] lo speed is unknown, defaulting to 1000
[  334.512536][T17718] lo speed is unknown, defaulting to 1000
[  334.852615][T17769] netlink: 'syz.0.3838': attribute type 1 has an invalid length.
[  334.973663][T17782] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  334.983774][T17782] netlink: 'syz.1.3841': attribute type 1 has an invalid length.
[  335.006126][T17782] 8021q: adding VLAN 0 to HW filter on device bond33
[  335.261037][T17802] netlink: 'syz.0.3846': attribute type 1 has an invalid length.
[  335.288923][    C0] net_ratelimit: 3 callbacks suppressed
[  335.288938][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  335.293785][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  335.467509][T17821] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  335.583763][T17828] netlink: 'syz.1.3855': attribute type 1 has an invalid length.
[  335.830622][T17843] openvswitch: netlink: Flow key attr not present in new flow.
[  335.902104][T17850] xt_hashlimit: invalid rate
[  336.156954][T17861] netlink: 'syz.1.3866': attribute type 4 has an invalid length.
[  336.328991][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  336.331083][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  336.587249][T17895] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  336.590771][T17895] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  336.595472][T17896] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  336.598509][T17896] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  337.005189][T17925] netlink: 'syz.0.3887': attribute type 1 has an invalid length.
[  337.035978][T17925] 8021q: adding VLAN 0 to HW filter on device bond52
[  337.180187][T17936] netlink: 'syz.1.3891': attribute type 3 has an invalid length.
[  337.183765][T17936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  337.285581][T17942] __nla_validate_parse: 17 callbacks suppressed
[  337.285603][T17942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3892'.
[  337.369043][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  337.371650][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  338.408951][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  338.411370][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  339.881942][T17914] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  339.963958][T17946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3893'.
[  339.990798][T17950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3896'.
[  339.994053][T17950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3896'.
[  340.025557][T17955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3898'.
[  340.058201][T17957] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3899'.
[  340.114473][T17962] lo speed is unknown, defaulting to 1000
[  340.202481][T17975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3905'.
[  340.324663][T17970] lo speed is unknown, defaulting to 1000
[  340.328156][T17962] lo speed is unknown, defaulting to 1000
[  340.464330][T17970] lo speed is unknown, defaulting to 1000
[  340.489024][    C0] net_ratelimit: 2 callbacks suppressed
[  340.489043][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  340.495035][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  340.579735][T17986] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3908'.
[  340.917654][T17995] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3911'.
[  341.045914][T17997] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  341.113483][T18001] netlink: 'syz.2.3914': attribute type 1 has an invalid length.
[  341.263658][T18021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3919'.
[  341.338473][T18029] netlink: 'syz.0.3924': attribute type 1 has an invalid length.
[  341.341983][T18031] x_tables: duplicate entry at hook 2
[  341.528944][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  341.531714][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  341.641030][T18071] hma(kX: entered promiscuous mode
[  341.723526][T18075] lo speed is unknown, defaulting to 1000
[  341.768363][T18077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  341.890806][T18075] lo speed is unknown, defaulting to 1000
[  342.083180][T16390] block nbd64: NBD_DISCONNECT
[  342.299846][T18101] __nla_validate_parse: 7 callbacks suppressed
[  342.299859][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3941'.
[  342.435078][T18113] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3946'.
[  342.473664][T18117] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3947'.
[  342.569029][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  342.571531][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  342.731209][T18142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3957'.
[  342.734725][T18142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3957'.
[  342.770573][T18142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3957'.
[  342.774892][T18142] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3957'.
[  342.801762][T18142] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  342.973948][T18150] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  342.979017][T18150] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  343.609041][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  343.611368][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  343.881936][T12471] tipc: Subscription rejected, illegal request
[  343.946908][T18164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3964'.
[  343.996433][T18175] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3967'.
[  344.109282][T18182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3970'.
[  344.116591][T18182] vlan5: entered allmulticast mode
[  344.118527][T18182] veth0_to_bond: entered allmulticast mode
[  344.305520][T18198] openvswitch: netlink: Flow actions attr not present in new flow.
[  344.932501][T18219] netlink: 'syz.1.3982': attribute type 5 has an invalid length.
[  345.028650][T18222] bond54: entered promiscuous mode
[  345.030900][T18222] 8021q: adding VLAN 0 to HW filter on device bond54
[  345.055423][T18222] 8021q: adding VLAN 0 to HW filter on device bond54
[  345.063285][T18222] bond54: (slave sit3): The slave device specified does not support setting the MAC address
[  345.068744][T18222] bond54: (slave sit3): Error -95 calling set_mac_address
[  345.167430][T18238] syzkaller1: entered promiscuous mode
[  345.171239][T18238] syzkaller1: entered allmulticast mode
[  345.216265][T18235] lo speed is unknown, defaulting to 1000
[  345.335113][T18235] lo speed is unknown, defaulting to 1000
[  345.540743][T18251] netlink: 'syz.1.3993': attribute type 1 has an invalid length.
[  345.664800][T18259] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  345.667721][T18259] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  345.689106][    C0] net_ratelimit: 2 callbacks suppressed
[  345.689121][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  345.692623][T18262] netlink: 'syz.1.3996': attribute type 13 has an invalid length.
[  345.693427][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  345.695937][T18262] netlink: 'syz.1.3996': attribute type 17 has an invalid length.
[  345.749490][T18262] gretap0: entered promiscuous mode
[  345.768446][T18262] ip6_vti0: left promiscuous mode
[  345.793348][T18262] batadv0: left promiscuous mode
[  345.797361][T18262] 8021q: adding VLAN 0 to HW filter on device batadv0
[  345.844403][T18262] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  345.857893][T18262] veth1_macvtap: left promiscuous mode
[  345.866362][T18262] veth0_macvtap: left promiscuous mode
[  345.876414][T18262] veth0_macvtap: entered promiscuous mode
[  345.886173][T18262] veth1_macvtap: entered promiscuous mode
[  345.888170][T18262] veth1_macvtap: entered allmulticast mode
[  345.891262][T18262] macsec0: left promiscuous mode
[  345.893241][T18262] macsec0: left allmulticast mode
[  345.895301][T18262] veth1_macvtap: left allmulticast mode
[  345.902518][T18262] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  345.933837][T18278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  345.954569][ T5668] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  345.957834][ T5668] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  345.968037][ T5721] lo speed is unknown, defaulting to 1000
[  345.970650][ T5668] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  345.974346][ T5721] sqz0: Port: 1 Link DOWN
[  345.975236][ T5668] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  345.983967][ T5721] lo speed is unknown, defaulting to 1000
[  346.105475][T18294] bond34: Invalid ad_actor_system MAC address.
[  346.107529][T18294] bond34: option ad_actor_system: invalid value (7)
[  346.111141][T18294] bond34 (unregistering): Released all slaves
[  346.191778][T18298] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  346.422356][T18305] sctp: [Deprecated]: syz.0.4009 (pid 18305) Use of int in max_burst socket option.
[  346.422356][T18305] Use struct sctp_assoc_value instead
[  346.643250][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x132
[  346.729000][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  346.731680][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  347.525875][T18381] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  347.603048][T18385] bond35 (unregistering): Released all slaves
[  347.732694][T18391] __nla_validate_parse: 23 callbacks suppressed
[  347.732705][T18391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4035'.
[  347.768976][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  347.771354][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  347.901998][T18397] netlink: 'syz.1.4036': attribute type 1 has an invalid length.
[  347.904578][T18397] netlink: 264 bytes leftover after parsing attributes in process `syz.1.4036'.
[  347.908068][T18397] netlink: 'syz.1.4036': attribute type 1 has an invalid length.
[  347.911676][T18397] netlink: 264 bytes leftover after parsing attributes in process `syz.1.4036'.
[  348.808998][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  349.572078][T18329] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  349.673058][T18404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4038'.
[  349.676226][T18404] netlink: 'syz.2.4038': attribute type 5 has an invalid length.
[  349.686361][T18404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4038'.
[  349.696163][T18404] geneve5: entered promiscuous mode
[  349.698077][T18404] geneve5: entered allmulticast mode
[  349.701281][ T5668] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  349.713005][ T5668] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  349.721528][ T5668] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  349.726453][ T5668] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  349.868917][T18418] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  349.872224][T18418] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.912805][T18418] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  349.916260][T18418] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.966023][T18418] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  349.969822][T18418] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.003169][T18418] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  350.006779][T18418] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.067844][ T5668] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  350.071719][ T5668] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  350.082219][ T5668] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  350.085651][ T5668] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  350.100599][ T5668] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  350.104052][ T5668] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  350.114554][ T5668] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  350.117796][ T5668] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  350.381799][T18432] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4050'.
[  350.434645][T18434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4051'.
[  350.729575][T18439] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4052'.
[  350.745395][T18446] x_tables: unsorted underflow at hook 1
[  350.889036][    C0] net_ratelimit: 3 callbacks suppressed
[  350.889048][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  350.893022][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  350.913436][T18456] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4059'.
[  351.026260][T18465] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4062'.
[  351.414113][T18488] bond54: entered allmulticast mode
[  351.928987][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  351.931152][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  351.951019][T18494] vlan0: left promiscuous mode
[  351.954584][T18494] bridge0: left promiscuous mode
[  351.966011][T18494] bond8: left promiscuous mode
[  351.970178][T18494] bridge5: left promiscuous mode
[  351.975049][T18494] macvlan0: left promiscuous mode
[  351.976810][T18494] macvlan0: left allmulticast mode
[  351.978747][T18494] bond12: left promiscuous mode
[  351.980661][T18494] bond12: left allmulticast mode
[  351.983545][T18494] macvlan1: left promiscuous mode
[  351.985439][T18494] macvlan1: left allmulticast mode
[  351.988331][T18494] bridge14: left promiscuous mode
[  351.991591][T18494] bridge15: left allmulticast mode
[  351.993699][T18494] bridge16: left allmulticast mode
[  352.006652][T18494] bridge19: left allmulticast mode
[  352.042965][T18494] bond26: left promiscuous mode
[  352.052190][T18494] bond27: left promiscuous mode
[  352.059350][T18494] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  352.064063][T18494] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  352.128328][T18503] syzkaller1: entered promiscuous mode
[  352.130556][T18503] syzkaller1: entered allmulticast mode
[  352.133372][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  352.136206][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  352.139338][   T12] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  352.142146][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  352.144854][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  352.147534][   T12] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  352.151665][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  352.154746][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  352.157531][   T12] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  352.160636][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  352.163386][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  352.166223][   T12] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  352.317252][T18523] netlink: 'syz.2.4080': attribute type 1 has an invalid length.
[  352.320994][T18523] netlink: 'syz.2.4080': attribute type 2 has an invalid length.
[  352.335517][T18523] netlink: 'syz.2.4080': attribute type 3 has an invalid length.
[  352.401054][T18528] netlink: 'syz.0.4082': attribute type 14 has an invalid length.
[  352.420912][T18528] netlink: 'syz.0.4082': attribute type 13 has an invalid length.
[  352.590047][T18542] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  352.596661][ T5675] lo speed is unknown, defaulting to 1000
[  352.604889][ T5675] sqz0: Port: 1 Link ACTIVE
[  352.608193][ T5675] lo speed is unknown, defaulting to 1000
[  352.678135][T18548] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  352.681132][T18548] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  352.763952][T18552] netlink: 'syz.0.4090': attribute type 21 has an invalid length.
[  352.766675][T18552] IPv6: NLM_F_CREATE should be specified when creating new route
[  352.773400][T18552] __nla_validate_parse: 7 callbacks suppressed
[  352.773410][T18552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4090'.
[  352.948055][T18560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  352.969043][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  352.971724][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  353.109627][T18564] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4095'.
[  353.285133][T18570] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4097'.
[  353.322545][T18570] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4097'.
[  353.332853][T18570] nbd: device at index 64 is going down
[  353.409732][T18574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4098'.
[  353.466415][T18584] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  353.472671][T18584] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  353.526652][T18584] lo speed is unknown, defaulting to 1000
[  353.640908][T18584] lo speed is unknown, defaulting to 1000
[  354.009255][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  354.011392][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  354.122653][T18615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4110'.
[  354.187968][T18620] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  354.193254][T18620] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  354.208677][T18622] geneve5: entered promiscuous mode
[  354.221344][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.230172][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.239333][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.247416][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.298476][T18629] bridge46: entered promiscuous mode
[  354.309668][T18629] bridge46: entered allmulticast mode
[  354.320706][T18639] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4115'.
[  354.381690][T18643] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4117'.
[  354.403111][T18628] bridge46: entered promiscuous mode
[  354.404931][T18628] bridge46: entered allmulticast mode
[  354.443226][T18648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4119'.
[  354.451035][T18646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4118'.
[  354.562229][T18663] pim6reg1: entered promiscuous mode
[  354.565615][T18663] pim6reg1: entered allmulticast mode
[  354.796493][T18695] netlink: 'syz.2.4134': attribute type 3 has an invalid length.
[  354.799773][T18695] netlink: 'syz.2.4134': attribute type 3 has an invalid length.
[  354.854049][T18705] netlink: 'syz.2.4137': attribute type 1 has an invalid length.
[  354.871720][T18705] netlink: 'syz.2.4137': attribute type 50 has an invalid length.
[  355.031822][T18727] nbd: device at index 64 is going down
[  355.223841][T18740] netlink: 'syz.2.4146': attribute type 1 has an invalid length.
[  355.250189][T18740] bond51: (slave bridge34): making interface the new active one
[  355.253428][T18740] bond51: (slave bridge34): Enslaving as an active interface with an up link
[  355.357102][T18747] 8021q: adding VLAN 0 to HW filter on device bond52
[  355.413113][T18752] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  355.544270][T18757] veth29: entered promiscuous mode
[  355.568504][T18757] bond53 (unregistering): Released all slaves
[  355.820042][T18762] netlink: 'syz.1.4155': attribute type 1 has an invalid length.
[  355.960688][T18777] 8021q: adding VLAN 0 to HW filter on device bond0
[  356.089090][    C0] net_ratelimit: 2 callbacks suppressed
[  356.089101][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  356.092985][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  356.966111][T18800] netlink: 'syz.2.4168': attribute type 1 has an invalid length.
[  357.009220][T18800] bond53: (slave bridge35): making interface the new active one
[  357.012508][T18800] bond53: (slave bridge35): Enslaving as an active interface with an up link
[  357.128998][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  357.131282][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  357.242557][T18820] nbd: device at index 64 is going down
[  357.387116][T18832] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  357.390308][T18832] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  357.844824][T18861] __nla_validate_parse: 48 callbacks suppressed
[  357.844843][T18861] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4186'.
[  357.853819][T18861] sctp: [Deprecated]: syz.1.4186 (pid 18861) Use of int in maxseg socket option.
[  357.853819][T18861] Use struct sctp_assoc_value instead
[  357.864880][T18861] netlink: 'syz.1.4186': attribute type 21 has an invalid length.
[  357.868591][T18861] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4186'.
[  357.907246][T18861] netlink: 'syz.1.4186': attribute type 1 has an invalid length.
[  358.028421][T18868] netlink: 'syz.0.4188': attribute type 1 has an invalid length.
[  358.036088][T18868] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4188'.
[  358.061144][T18878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4192'.
[  358.130920][T18885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4193'.
[  358.143177][T18885] bond55: (slave bridge46): making interface the new active one
[  358.148528][T18885] bond55: (slave bridge46): Enslaving as an active interface with an up link
[  358.168978][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  358.171083][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  358.211910][T18888] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4194'.
[  358.294077][T18893] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4195'.
[  358.906344][T18897] block nbd1: NBD_DISCONNECT
[  358.909799][T18897] block nbd1: Send disconnect failed -32
[  358.924245][T18897] block nbd1: shutting down sockets
[  358.976132][   T33] audit: type=1804 audit(1778603872.003:11): pid=18902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4198" name="/newroot/1396/cgroup.controllers" dev="tmpfs" ino=7135 res=1 errno=0
[  358.978264][T18902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4198'.
[  358.997183][   T33] audit: type=1800 audit(1778603872.003:12): pid=18902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4198" name="cgroup.controllers" dev="tmpfs" ino=7135 res=0 errno=0
[  359.121206][T18916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  359.152334][T18905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4200'.
[  359.163506][T18910] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  359.207866][T18924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4206'.
[  359.211026][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  359.211092][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  360.248971][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  360.251050][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  360.591901][T18952] validate_nla: 3 callbacks suppressed
[  360.591912][T18952] netlink: 'syz.2.4213': attribute type 1 has an invalid length.
[  360.795647][T18966] bridge0: failed insert local address into bridge forwarding table
[  360.879849][T18970] lo speed is unknown, defaulting to 1000
[  360.979801][T18970] lo speed is unknown, defaulting to 1000
[  361.142473][T18978] netlink: 'syz.0.4223': attribute type 1 has an invalid length.
[  361.162738][T18978] 8021q: adding VLAN 0 to HW filter on device bond57
[  361.196658][T18981] lo speed is unknown, defaulting to 1000
[  361.239945][T18986] netlink: 'syz.0.4225': attribute type 4 has an invalid length.
[  361.240076][T18987] netlink: 'syz.2.4221': attribute type 10 has an invalid length.
[  361.288977][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  361.291289][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  361.392430][T18981] lo speed is unknown, defaulting to 1000
[  361.633577][T19002] netlink: 'syz.0.4232': attribute type 1 has an invalid length.
[  361.640702][T19002] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  361.644687][T19002] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.684556][T19002] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  361.687885][T19002] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.738946][T19002] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  361.742563][T19002] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.767156][T19002] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  361.771516][T19002] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.824810][ T5668] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  361.829677][ T5668] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  361.838142][ T5668] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  361.844866][ T5668] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  361.855300][ T5668] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  361.858627][ T5668] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  361.870919][ T5668] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  361.873842][ T5668] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  362.113488][T19052] netlink: 'syz.2.4242': attribute type 1 has an invalid length.
[  362.167321][T19054] netlink: 'syz.0.4247': attribute type 13 has an invalid length.
[  362.329322][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  362.331637][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  362.394912][T19063] nbd: socks must be embedded in a SOCK_ITEM attr
[  362.435037][T19068] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  362.887451][T19093] geneve1: entered promiscuous mode
[  362.934622][T19097] __nla_validate_parse: 17 callbacks suppressed
[  362.934640][T19097] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4258'.
[  362.972957][T19102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4260'.
[  363.022220][T19086] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4258'.
[  363.025449][T19086] nbd: device at index 64 is going down
[  363.213790][T19117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4265'.
[  363.219942][T19117] xt_l2tp: invalid flags combination: 8
[  363.233198][T19117] netlink: 'syz.1.4265': attribute type 1 has an invalid length.
[  363.307898][T19128] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4269'.
[  363.320530][T19127] netlink: 16146 bytes leftover after parsing attributes in process `syz.1.4269'.
[  363.321345][T19128] netlink: 16146 bytes leftover after parsing attributes in process `syz.1.4269'.
[  363.369010][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  363.371176][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  363.377735][T19134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4271'.
[  363.452972][T19136] lo speed is unknown, defaulting to 1000
[  363.578535][T19136] lo speed is unknown, defaulting to 1000
[  363.634100][T19152] netlink: 'syz.1.4276': attribute type 1 has an invalid length.
[  363.766367][T19159] netlink: 'syz.0.4277': attribute type 6 has an invalid length.
[  363.839764][T19168] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4280'.
[  363.972174][T19174] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4282'.
[  364.020691][T19179] nbd: nbd64 already in use
[  364.409047][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  364.411299][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  364.418217][T19292] xt_CT: No such helper "syz0"
[  364.502130][T19303] nbd: illegal input index 871591272
[  364.645809][T19311] sctp: [Deprecated]: syz.1.4295 (pid 19311) Use of struct sctp_assoc_value in delayed_ack socket option.
[  364.645809][T19311] Use struct sctp_sack_info instead
[  364.947838][T19328] gretap0: left promiscuous mode
[  364.988673][T19328] 8021q: adding VLAN 0 to HW filter on device batadv0
[  365.021314][T19328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  365.028322][T19328] veth1_macvtap: left promiscuous mode
[  365.032337][T19328] veth0_macvtap: left promiscuous mode
[  365.041327][T19328] veth0_macvtap: entered promiscuous mode
[  365.052778][T19328] veth1_macvtap: entered promiscuous mode
[  365.061215][T19328] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  365.151856][T19344] bridge0: entered allmulticast mode
[  365.154005][T19344] bridge0: left allmulticast mode
[  365.180059][T19342] hsr0: entered promiscuous mode
[  366.489125][    C0] net_ratelimit: 2 callbacks suppressed
[  366.489139][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  366.493167][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  367.529146][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  367.531511][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  367.827329][T19323] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  367.975584][T19381] __nla_validate_parse: 97 callbacks suppressed
[  367.975595][T19381] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4318'.
[  368.004893][T19385] lo speed is unknown, defaulting to 1000
[  368.126424][T19385] lo speed is unknown, defaulting to 1000
[  368.160221][T19406] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4323'.
[  368.222989][T19409] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4323'.
[  368.231035][T19409] nbd: device at index 64 is going down
[  368.264342][   T33] audit: type=1804 audit(1778603881.293:13): pid=19413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4327" name="/newroot/1448/cgroup.controllers" dev="tmpfs" ino=7403 res=1 errno=0
[  368.288085][   T33] audit: type=1800 audit(1778603881.293:14): pid=19413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4327" name="cgroup.controllers" dev="tmpfs" ino=7403 res=0 errno=0
[  368.372996][T19419] validate_nla: 88 callbacks suppressed
[  368.373007][T19419] netlink: 'syz.2.4330': attribute type 3 has an invalid length.
[  368.381898][T19419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4330'.
[  368.424970][T19421] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4331'.
[  368.569034][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  368.571177][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  368.654568][T19435] sctp: [Deprecated]: syz.0.4337 (pid 19435) Use of int in maxseg socket option.
[  368.654568][T19435] Use struct sctp_assoc_value instead
[  368.717118][T19443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4338'.
[  368.758476][T19443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4338'.
[  369.322254][T19477] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4347'.
[  369.346176][T19477] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4347'.
[  369.609041][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  369.611176][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  369.891102][T19489] netlink: 'syz.1.4349': attribute type 1 has an invalid length.
[  369.908591][T19489] 8021q: adding VLAN 0 to HW filter on device bond36
[  370.074813][T19504] netlink: 'syz.1.4354': attribute type 1 has an invalid length.
[  370.078680][T19504] workqueue: Failed to create a rescuer kthread for wq "bond37": -EINTR
[  370.135331][T19513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4356'.
[  370.487389][T19513] tipc: Resetting bearer <eth:hsr0>
[  370.500959][T19513] tipc: Resetting bearer <eth:hsr0>
[  370.685186][T19513] veth1_vlan: left allmulticast mode
[  370.784756][   T24] lo speed is unknown, defaulting to 1000
[  370.792051][   T24] sqz0: Port: 1 Link DOWN
[  370.808458][ T5668] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  370.812448][ T5668] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  370.816927][ T5668] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  370.823490][ T5668] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  370.832564][   T24] lo speed is unknown, defaulting to 1000
[  370.835464][ T5668] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  370.842616][ T5668] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  370.847021][ T5668] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  370.850565][ T5668] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  370.945795][T19534] bridge48: entered promiscuous mode
[  370.948000][T19534] bridge48: entered allmulticast mode
[  370.997185][T19544] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  371.015784][T19535] bridge48: entered promiscuous mode
[  371.019315][T19535] bridge48: entered allmulticast mode
[  371.163274][T19564] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048)
[  371.308664][T19583] netlink: 'syz.1.4376': attribute type 21 has an invalid length.
[  371.533381][T19616] netlink: 'syz.0.4389': attribute type 1 has an invalid length.
[  371.573879][T19621] syzkaller1: tun_chr_ioctl cmd 1074025677
[  371.576533][T19621] syzkaller1: linktype set to 805
[  372.077301][T19655] 8021q: adding VLAN 0 to HW filter on device bond0
[  372.111313][T19652] bond0: entered promiscuous mode
[  372.113729][T19652] batadv0: entered promiscuous mode
[  372.117136][T19652] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  372.126014][T19652] bond0: left promiscuous mode
[  372.131406][T19652] batadv0: left promiscuous mode
[  372.395449][T19684] netlink: 'syz.0.4412': attribute type 1 has an invalid length.
[  372.422532][T19684] 8021q: adding VLAN 0 to HW filter on device bond62
[  372.426872][T19684] bond61: (slave bond62): making interface the new active one
[  372.430694][T19684] bond61: (slave bond62): Enslaving as an active interface with an up link
[  373.054073][T19717] lo speed is unknown, defaulting to 1000
[  373.132093][T19717] lo speed is unknown, defaulting to 1000
[  373.340314][T19729] netlink: 'syz.2.4424': attribute type 10 has an invalid length.
[  373.344866][T19729] __nla_validate_parse: 18 callbacks suppressed
[  373.344933][T19729] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4424'.
[  373.354625][T19729] geneve1: left promiscuous mode
[  373.356493][T19729] net_ratelimit: 2 callbacks suppressed
[  373.356501][T19729] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  373.410017][T19734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4425'.
[  373.672454][T19746] netlink: 'syz.0.4429': attribute type 1 has an invalid length.
[  373.675730][T19746] netlink: 'syz.0.4429': attribute type 2 has an invalid length.
[  373.679333][T19746] netlink: 'syz.0.4429': attribute type 1 has an invalid length.
[  373.682480][T19746] netlink: 'syz.0.4429': attribute type 3 has an invalid length.
[  373.685698][T19746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4429'.
[  374.024752][T19745] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  374.050780][ T8970] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  374.056493][ T8970] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  374.061185][ T8970] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  374.068223][ T8970] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  374.076720][ T8970] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  374.088640][ T8970] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  374.096795][ T8970] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  374.107705][ T8970] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  374.111348][ T8970] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  374.123726][ T8970] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  374.126412][ T8970] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  374.129260][ T8970] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  374.161330][T19767] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  374.173109][T19767] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4434'.
[  374.192586][T19769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4435'.
[  374.205602][T19772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4436'.
[  374.210367][T19772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4436'.
[  374.214364][T19772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4436'.
[  374.250449][T19775] netlink: 'syz.0.4435': attribute type 3 has an invalid length.
[  374.253048][T19775] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4435'.
[  375.243570][T19807] bond63 (unregistering): Released all slaves
[  375.362027][T19817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4447'.
[  375.588738][T19826] tipc: Trying to set illegal importance in message
[  375.761364][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  375.764911][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  375.768670][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  375.773774][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  375.865692][T19851] netlink: 'syz.1.4461': attribute type 1 has an invalid length.
[  375.892162][T19851] 8021q: adding VLAN 0 to HW filter on device bond37
[  376.140756][T19873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  376.213041][T19879] netlink: 'syz.1.4471': attribute type 1 has an invalid length.
[  376.295754][T19886] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  376.299920][T19886] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  376.610366][T19902] netlink: 'syz.1.4480': attribute type 1 has an invalid length.
[  376.664332][T19905] lo speed is unknown, defaulting to 1000
[  376.783127][T19905] lo speed is unknown, defaulting to 1000
[  376.874281][T19919] 8021q: adding VLAN 0 to HW filter on device batadv0
[  376.912902][T19919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  376.918115][T19919] veth1_macvtap: left promiscuous mode
[  376.921994][T19919] veth0_macvtap: left promiscuous mode
[  376.924310][T19919] veth0_macvtap: entered promiscuous mode
[  376.927193][T19919] veth1_macvtap: entered promiscuous mode
[  376.931788][T19919] bridge0: port 2(vlan3) entered blocking state
[  376.933857][T19919] bridge0: port 2(vlan3) entered forwarding state
[  376.939734][T19919] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  376.944713][ T5721] lo speed is unknown, defaulting to 1000
[  376.948337][ T5721] syz2: Port: 1 Link ACTIVE
[  376.956142][ T6379] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  376.960279][ T6379] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  376.966809][ T8970] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  376.991102][ T8970] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  376.994270][ T8970] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  377.003749][ T8970] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  377.058420][T19923] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  377.149898][T19928] tipc: MTU too low for tipc bearer
[  377.217227][T19935] netlink: 'syz.0.4490': attribute type 1 has an invalid length.
[  377.255896][T19940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  377.343488][T19948] 0: renamed from hsr0
[  377.350855][T19948] tipc: Disabling bearer <eth:hsr0>
[  377.355505][T19948] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  377.359689][T19948] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  377.363598][T19948] 0: entered allmulticast mode
[  377.365270][T19948] hsr_slave_0: entered allmulticast mode
[  377.367573][T19948] hsr_slave_1: entered allmulticast mode
[  377.371500][T19948] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  377.377315][T19948] 0: left promiscuous mode
[  377.469978][T19962] netlink: 'syz.0.4501': attribute type 1 has an invalid length.
[  377.525187][T19962] bond63: (slave bridge49): making interface the new active one
[  377.528382][T19962] bond63: (slave bridge49): Enslaving as an active interface with an up link
[  377.694414][T19984] tipc: Failed to remove unknown binding: 66,1,1/720148001:2850195381/2850195383
[  377.710528][T19984] tipc: Failed to remove unknown binding: 66,1,1/720148001:2850195381/2850195383
[  377.721145][T19989] bond64: (slave bridge50): making interface the new active one
[  377.723742][T19984] tipc: Failed to remove unknown binding: 66,1,1/720148001:2850195381/2850195383
[  377.726969][T19989] bond64: (slave bridge50): Enslaving as an active interface with an up link
[  377.966463][T20017] bridge0: port 2(vlan3) entered disabled state
[  377.968631][T20017] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  378.077270][T20031] bond55: entered promiscuous mode
[  378.079897][T20031] bond55: entered allmulticast mode
[  378.081787][T20031] 8021q: adding VLAN 0 to HW filter on device bond55
[  378.095659][T20031] erspan3: entered allmulticast mode
[  378.106504][T20031] bond55: (slave erspan3): making interface the new active one
[  378.109187][T20031] erspan3: entered promiscuous mode
[  378.114602][T20031] bond55: (slave erspan3): Enslaving as an active interface with an up link
[  378.257475][T20045] syzkaller1: entered promiscuous mode
[  378.260089][T20045] syzkaller1: entered allmulticast mode
[  378.415490][T20061] __nla_validate_parse: 34 callbacks suppressed
[  378.415506][T20061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4532'.
[  378.437603][T20064] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  378.450136][T20063] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  378.564706][T20076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4537'.
[  378.735796][T20082] bond41: (slave bridge30): making interface the new active one
[  378.738745][T20087] validate_nla: 4 callbacks suppressed
[  378.738768][T20087] netlink: 'syz.2.4540': attribute type 1 has an invalid length.
[  378.745011][T20082] bond41: (slave bridge30): Enslaving as an active interface with an up link
[  378.802351][T20087] 8021q: adding VLAN 0 to HW filter on device bond57
[  378.808038][T20087] bond56: (slave bond57): making interface the new active one
[  378.812200][T20087] bond56: (slave bond57): Enslaving as an active interface with an up link
[  378.844665][T20087] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4540'.
[  378.857604][T20093] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  379.111867][T20117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4549'.
[  379.157729][T20122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4548'.
[  379.162949][T20122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4548'.
[  379.393538][T20137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4554'.
[  379.399760][T20137] openvswitch: netlink: Flow actions attr not present in new flow.
[  379.461655][T20140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4556'.
[  379.471848][T20140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4556'.
[  379.666529][T20153] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4559'.
[  379.732052][T20163] netlink: 'syz.1.4559': attribute type 8 has an invalid length.
[  380.371338][T20206] netlink: 'syz.0.4578': attribute type 1 has an invalid length.
[  380.490588][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.932134][T20208] bond65: (slave bridge53): making interface the new active one
[  380.935245][T20208] bond65: (slave bridge53): Enslaving as an active interface with an up link
[  380.970516][T20213] x_tables: duplicate underflow at hook 1
[  381.103568][T20229] workqueue: Failed to create a rescuer kthread for wq "bond42": -EINTR
[  381.132657][T20238] netlink: 'syz.1.4587': attribute type 1 has an invalid length.
[  381.176179][T20238] bond42: (slave bridge34): making interface the new active one
[  381.180330][T20238] bond42: (slave bridge34): Enslaving as an active interface with an up link
[  381.230812][T20248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.383656][T20272] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  381.387243][T20272] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  381.436885][T20264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.449037][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.470300][T20277] lo speed is unknown, defaulting to 1000
[  381.530670][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.565216][T20277] lo speed is unknown, defaulting to 1000
[  382.115642][T20310] netlink: 'syz.0.4608': attribute type 1 has an invalid length.
[  382.118146][T20310] netlink: 'syz.0.4608': attribute type 4 has an invalid length.
[  382.304712][T20323] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  382.374809][T20342] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  382.377421][T20342] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  382.838008][T20382] 8021q: adding VLAN 0 to HW filter on device batadv0
[  382.860144][ T8014] lo speed is unknown, defaulting to 1000
[  382.862739][ T8014] sqz0: Port: 1 Link ACTIVE
[  382.896742][ T8014] lo speed is unknown, defaulting to 1000
[  382.915123][T20386] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  383.411672][T20416] netlink: 'syz.0.4645': attribute type 1 has an invalid length.
[  383.562717][T20426] __nla_validate_parse: 35 callbacks suppressed
[  383.562727][T20426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4647'.
[  383.592840][T20428] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4648'.
[  383.604329][T20428] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4648'.
[  383.941593][T20446] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4655'.
[  383.949893][T20446] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4655'.
[  383.954013][T20446] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4655'.
[  383.968088][T20448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4656'.
[  383.998104][T20452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4658'.
[  384.008365][T20452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4658'.
[  384.173515][T20469] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4665'.
[  384.417136][T20484] netlink: 'syz.0.4671': attribute type 1 has an invalid length.
[  384.484116][T20484] bond67: (slave bridge59): making interface the new active one
[  384.487976][T20484] bond67: (slave bridge59): Enslaving as an active interface with an up link
[  385.236204][T20523] netlink: 'syz.2.4681': attribute type 1 has an invalid length.
[  385.265683][T20523] bond58: (slave bridge41): making interface the new active one
[  385.269258][T20523] bond58: (slave bridge41): Enslaving as an active interface with an up link
[  385.412480][T20532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  386.119162][T20575] syzkaller1: entered promiscuous mode
[  386.121077][T20575] syzkaller1: entered allmulticast mode
[  389.140298][T20581] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  389.332080][T20626] __nla_validate_parse: 23 callbacks suppressed
[  389.332095][T20626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4713'.
[  389.406730][T20630] netlink: 'syz.1.4715': attribute type 11 has an invalid length.
[  389.505621][T20637] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4718'.
[  389.637135][T20651] netlink: 'syz.1.4719': attribute type 1 has an invalid length.
[  389.642104][T20651] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.4719'.
[  389.677235][ T7401] block nbd1: Receive control failed (result -32)
[  390.570244][T20664] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4723'.
[  390.574346][T20664] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4723'.
[  390.583879][T20664] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4723'.
[  392.463639][T20645] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  392.468200][T20673] netlink: 'syz.0.4727': attribute type 11 has an invalid length.
[  392.472814][T20673] netlink: 'syz.0.4727': attribute type 23 has an invalid length.
[  392.477369][T20673] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4727'.
[  392.487914][T20675] netlink: 'syz.0.4727': attribute type 11 has an invalid length.
[  392.504801][T20675] netlink: 'syz.0.4727': attribute type 23 has an invalid length.
[  392.509456][T20675] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4727'.
[  392.582010][T20687] netlink: 'syz.0.4731': attribute type 1 has an invalid length.
[  392.616601][T20690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4732'.
[  392.631187][T20693] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4733'.
[  392.638750][T20687] bond68: (slave bridge61): making interface the new active one
[  392.643171][T20687] bond68: (slave bridge61): Enslaving as an active interface with an up link
[  392.663352][T20693] bridge0: port 2(vlan3) entered blocking state
[  392.666262][T20693] bridge0: port 2(vlan3) entered forwarding state
[  392.669487][T20693] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  392.672637][T20693] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  392.682113][T20693] bridge0: port 2(vlan3) entered disabled state
[  392.685079][T20693] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  392.755069][T20703] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  392.766014][T20705] netlink: 'syz.2.4738': attribute type 1 has an invalid length.
[  392.799272][T20705] bond59: entered promiscuous mode
[  392.801560][T20705] 8021q: adding VLAN 0 to HW filter on device bond59
[  392.820254][T20705] 8021q: adding VLAN 0 to HW filter on device bond59
[  392.822941][T20705] bond59: (slave wireguard0): The slave device specified does not support setting the MAC address
[  392.826496][T20705] bond59: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  392.839473][T20705] bond59: (slave wireguard0): making interface the new active one
[  392.842234][T20705] wireguard0: entered promiscuous mode
[  392.845289][T20705] bond59: (slave wireguard0): Enslaving as an active interface with an up link
[  392.893501][T20714] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  393.121014][T20731] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  393.123737][T20731] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  393.126064][T20731] veth0_virt_wifi: entered allmulticast mode
[  393.129942][T20731] veth0_virt_wifi: left allmulticast mode
[  393.141759][T20732] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.199614][T20732] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.268699][T20732] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.332369][T20732] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.398758][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  393.410475][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  393.423753][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  393.437060][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  393.469978][T20731] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.574004][T20731] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.658291][T20731] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.704886][T20752] vxcan1: entered allmulticast mode
[  393.720214][T20731] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.128908][T20759] bridge62: entered promiscuous mode
[  394.138040][T20759] bridge62: entered allmulticast mode
[  394.347119][T20773] __nla_validate_parse: 7 callbacks suppressed
[  394.347131][T20773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4756'.
[  394.392543][T20775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4757'.
[  394.396492][T20775] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20002
[  394.399314][T20775] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  395.429176][T20788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4760'.
[  395.436942][T20788] netlink: 'syz.2.4760': attribute type 10 has an invalid length.
[  395.456984][T20791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4761'.
[  395.515394][ T8970] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  395.526261][ T8970] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  395.535565][ T8970] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  395.549897][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  395.634771][T20796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4763'.
[  396.596755][T20807] bond69: Removing last ns target with arp_interval on
[  396.629323][T20808] netlink: 'syz.1.4768': attribute type 1 has an invalid length.
[  396.631961][T20808] netlink: 'syz.1.4768': attribute type 2 has an invalid length.
[  396.637169][T20808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4768'.
[  396.644032][T20808] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20004
[  396.712826][T20817] lo speed is unknown, defaulting to 1000
[  396.807839][T20822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4771'.
[  396.829994][T20817] lo speed is unknown, defaulting to 1000
[  397.117563][T20840] netlink: 'syz.0.4778': attribute type 1 has an invalid length.
[  397.136774][T20840] bond71: entered promiscuous mode
[  397.140061][T20840] bond71: entered allmulticast mode
[  397.144218][T20840] 8021q: adding VLAN 0 to HW filter on device bond71
[  397.155434][T20840] erspan1: entered allmulticast mode
[  397.163447][T20840] bond71: (slave erspan1): making interface the new active one
[  397.166521][T20840] erspan1: entered promiscuous mode
[  397.170249][T20840] bond71: (slave erspan1): Enslaving as an active interface with an up link
[  397.596941][T20844] : renamed from lo (while UP)
[  397.671452][T20846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4780'.
[  397.822984][T20850] macsec3: entered promiscuous mode
[  397.825166][T20850] bridge0: entered promiscuous mode
[  397.916931][T20854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4784'.
[  398.036653][T20861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4787'.
[  398.140718][T20867] 8021q: adding VLAN 0 to HW filter on device bond43
[  398.241843][T20880] netlink: 'syz.1.4795': attribute type 1 has an invalid length.
[  398.265537][T20880] workqueue: Failed to create a rescuer kthread for wq "bond44": -EINTR
[  398.446502][T20887] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  398.732765][T20916] netlink: 'syz.0.4808': attribute type 4 has an invalid length.
[  398.741755][T20918] netlink: 'syz.2.4810': attribute type 1 has an invalid length.
[  398.773705][T20918] bond60: (slave bridge42): making interface the new active one
[  398.778382][T20918] bond60: (slave bridge42): Enslaving as an active interface with an up link
[  398.956042][T20939] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  398.989179][T20942] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  399.109952][T20951] bond72: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[  399.113666][T20951] bond72: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms
[  399.152546][T20954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  399.948509][T20976] __nla_validate_parse: 11 callbacks suppressed
[  399.948523][T20976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4826'.
[  400.188365][T20996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4831'.
[  400.191842][T20996] netlink: 'syz.2.4831': attribute type 13 has an invalid length.
[  400.194451][T20996] netlink: 'syz.2.4831': attribute type 17 has an invalid length.
[  400.196194][T20988] sctp: [Deprecated]: syz.0.4828 (pid 20988) Use of struct sctp_assoc_value in delayed_ack socket option.
[  400.196194][T20988] Use struct sctp_sack_info instead
[  400.227362][T20996] bridge0: port 2(vlan3) entered blocking state
[  400.229529][T20996] bridge0: port 2(vlan3) entered forwarding state
[  400.231828][T20996] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  400.234196][T20996] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  400.285460][T20996] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  400.375048][T21005] syzkaller1: entered promiscuous mode
[  400.381362][T21005] syzkaller1: entered allmulticast mode
[  400.495275][T21012] lo speed is unknown, defaulting to 1000
[  400.676323][T21012] lo speed is unknown, defaulting to 1000
[  400.747518][T21030] netlink: 'syz.2.4840': attribute type 11 has an invalid length.
[  400.797899][T21033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4841'.
[  400.874119][T21043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4843'.
[  400.904447][T21043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4843'.
[  400.911397][T21044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4843'.
[  401.029053][T21048] lo speed is unknown, defaulting to 1000
[  401.119621][T21048] lo speed is unknown, defaulting to 1000
[  401.726963][T21076] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4855'.
[  401.883468][T21089] netlink: 'syz.0.4859': attribute type 1 has an invalid length.
[  401.905376][T21080] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  401.915710][T21089] bond73: (slave bridge64): making interface the new active one
[  401.919769][T21089] bond73: (slave bridge64): Enslaving as an active interface with an up link
[  402.164998][T21104] veth1_to_batadv: entered promiscuous mode
[  402.217242][T21106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4864'.
[  402.231276][T21111] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  402.311877][T21117] netlink: 'syz.2.4867': attribute type 1 has an invalid length.
[  402.324344][T21119] Cannot find set identified by id 3 to match
[  402.332631][T21119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4868'.
[  402.336279][T21119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4868'.
[  402.353835][T21117] bond61: (slave bridge43): making interface the new active one
[  402.358154][T21117] bond61: (slave bridge43): Enslaving as an active interface with an up link
[  402.655084][T21148] netlink: 'syz.2.4876': attribute type 2 has an invalid length.
[  402.846310][T21173] netlink: 'syz.1.4885': attribute type 10 has an invalid length.
[  402.854679][T21173] netlink: 'syz.1.4885': attribute type 10 has an invalid length.
[  406.182578][T21205] netlink: 'syz.2.4898': attribute type 1 has an invalid length.
[  406.186856][T21203] __nla_validate_parse: 12 callbacks suppressed
[  406.186874][T21203] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4897'.
[  406.248262][T21205] bond62: (slave bridge44): making interface the new active one
[  406.256674][T21205] bond62: (slave bridge44): Enslaving as an active interface with an up link
[  406.274784][T21209] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4900'.
[  406.388474][T21220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4902'.
[  406.399559][T21220] batman_adv: batadv0: Removing interface: ipvlan2
[  406.501255][T21224] netlink: 'syz.1.4903': attribute type 10 has an invalid length.
[  406.615844][T21233] netlink: 'syz.0.4909': attribute type 1 has an invalid length.
[  406.658269][T21233] bond74: (slave bridge67): making interface the new active one
[  406.666055][T21233] bond74: (slave bridge67): Enslaving as an active interface with an up link
[  407.312920][T21255] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4916'.
[  407.316820][T21255] bridge0: port 2(vlan3) entered disabled state
[  407.319620][T21255] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  407.349235][T21255] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4916'.
[  407.359312][T21255] bridge0: port 2(vlan3) entered blocking state
[  407.362042][T21255] bridge0: port 2(vlan3) entered forwarding state
[  407.364937][T21255] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  407.368014][T21255] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  407.385585][T21255] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4916'.
[  407.390567][T21255] bridge0: port 2(vlan3) entered disabled state
[  407.393552][T21255] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  407.981056][T21278] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20001
[  407.985553][T21278] IPVS: set_ctl: invalid protocol: 26 172.20.20.35:20003
[  408.034042][T21282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4923'.
[  408.158156][T21289] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4924'.
[  408.292520][T21302] xt_hashlimit: size too large, truncated to 1048576
[  408.468873][T21316] xt_hashlimit: size too large, truncated to 1048576
[  408.479989][T21320] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4934'.
[  408.558652][T21323] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4934'.
[  408.562586][T21323] nbd: nbd64 already in use
[  408.563396][T21260] block nbd64: NBD_DISCONNECT
[  408.724191][T21330] netlink: 'syz.0.4938': attribute type 10 has an invalid length.
[  408.726928][T21330] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  409.384700][T21377] netlink: 'syz.2.4945': attribute type 1 has an invalid length.
[  409.390691][T21376] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[  409.437280][T21377] bond63: (slave bridge45): making interface the new active one
[  409.448998][T21377] bond63: (slave bridge45): Enslaving as an active interface with an up link
[  409.545244][T21382] netlink: 'syz.1.4947': attribute type 1 has an invalid length.
[  409.594308][T21382] 8021q: adding VLAN 0 to HW filter on device bond44
[  409.660159][T21394] bond44: (slave veth33): Enslaving as an active interface with a down link
[  409.677707][T21383] bond44: (slave veth35): Enslaving as an active interface with a down link
[  409.726229][T21392] lo speed is unknown, defaulting to 1000
[  409.832872][T21411] ipt_rpfilter: unknown options
[  409.915518][T21392] lo speed is unknown, defaulting to 1000
[  411.002261][T21453] nbd: device at index 64 is going down
[  411.033356][T21457] gretap2: entered allmulticast mode
[  411.238499][T21467] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  411.243100][T21467] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  411.398241][T21473] __nla_validate_parse: 11 callbacks suppressed
[  411.398251][T21473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4975'.
[  411.597207][T21486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4979'.
[  411.603578][T21486] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4979'.
[  411.715463][T21490] netlink: 'syz.1.4981': attribute type 1 has an invalid length.
[  411.756042][T21490] bond45: (slave bridge37): making interface the new active one
[  411.762120][T21490] bond45: (slave bridge37): Enslaving as an active interface with an up link
[  411.783238][T21493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4982'.
[  411.924896][T21508] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  411.930023][T21508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4987'.
[  411.932967][T21508] netlink: 121 bytes leftover after parsing attributes in process `syz.0.4987'.
[  411.960500][T21510] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  412.027102][T21513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4990'.
[  412.100729][T21517] hsr0: entered promiscuous mode
[  412.297140][T21530] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.374491][T21530] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.398287][T21539] tipc: New replicast peer: 172.20.20.170
[  412.406133][T21539] tipc: Enabled bearer <udp:syz2>, priority 10
[  412.424200][T21536] xt_CT: You must specify a L4 protocol and not use inversions on it
[  412.431532][T21530] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.435152][T21536] netlink: 'syz.0.4998': attribute type 21 has an invalid length.
[  412.443392][T21536] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4998'.
[  412.445257][T21538] lo speed is unknown, defaulting to 1000
[  412.472986][T21530] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.567008][ T8970] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  412.584201][ T8970] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  412.606803][ T8970] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  412.638046][T21538] lo speed is unknown, defaulting to 1000
[  412.646618][ T8970] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  412.727531][T21545] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5000'.
[  412.864103][T21556] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5003'.
[  412.934198][T21556] bond64: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  412.954618][T21556] bond64 (unregistering): Released all slaves
[  413.295710][T21584] erspan0: entered promiscuous mode
[  413.422348][T21592] lo speed is unknown, defaulting to 1000
[  413.551009][T21592] lo speed is unknown, defaulting to 1000
[  414.354957][T21651] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  414.944263][T21698] Unknown options in mask 6
[  414.984250][T21700] netlink: 'syz.0.5042': attribute type 1 has an invalid length.
[  415.012475][T21700] bond75: (slave bridge68): making interface the new active one
[  415.015820][T21700] bond75: (slave bridge68): Enslaving as an active interface with an up link
[  415.100236][T21707] syzkaller1: entered promiscuous mode
[  415.102472][T21707] syzkaller1: entered allmulticast mode
[  415.345927][T21729] pimreg0: tun_chr_ioctl cmd 1074025681
[  415.410863][T21733] netlink: 'syz.1.5050': attribute type 1 has an invalid length.
[  415.442991][T21733] bond46: (slave bridge38): making interface the new active one
[  415.446176][T21733] bond46: (slave bridge38): Enslaving as an active interface with an up link
[  415.582589][T21744] macvlan4: entered allmulticast mode
[  415.584997][T21744] veth1_vlan: entered allmulticast mode
[  415.755119][T21756] netlink: 'syz.0.5057': attribute type 1 has an invalid length.
[  415.821906][T21756] bond76: (slave bridge69): making interface the new active one
[  415.825618][T21756] bond76: (slave bridge69): Enslaving as an active interface with an up link
[  415.962745][T21770] netlink: 'syz.0.5060': attribute type 13 has an invalid length.
[  415.969891][T21770] netlink: 'syz.0.5060': attribute type 17 has an invalid length.
[  416.364886][T21766] veth1_vlan: left allmulticast mode
[  416.374488][ T5721] lo speed is unknown, defaulting to 1000
[  416.396450][T21770] gretap0: refused to change device tx_queue_len
[  416.402694][T21770] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  416.410988][ T8017] lo speed is unknown, defaulting to 1000
[  416.415842][ T5721] lo speed is unknown, defaulting to 1000
[  416.600041][T21777] __nla_validate_parse: 23 callbacks suppressed
[  416.600055][T21777] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5061'.
[  416.970240][T21799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5066'.
[  417.604012][T21803] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5068'.
[  417.645527][T21812] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5067'.
[  417.676050][T21812] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5067'.
[  417.682323][T21812] nbd: device at index 64 is going down
[  418.154540][T21842] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  418.159586][T21842] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  418.330526][T21843] tipc: Resetting bearer <eth:syzkaller0>
[  418.532917][T21851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5081'.
[  418.554502][T21853] netlink: 'syz.2.5082': attribute type 1 has an invalid length.
[  418.589622][T21853] 8021q: adding VLAN 0 to HW filter on device bond64
[  418.636898][T21859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5084'.
[  418.664754][T21859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5084'.
[  418.812559][T21869] netlink: 392 bytes leftover after parsing attributes in process `syz.1.5087'.
[  419.594167][T21896] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5095'.
[  419.664389][T21905] netlink: 'syz.2.5097': attribute type 1 has an invalid length.
[  419.703378][T21905] bond65: (slave bridge46): making interface the new active one
[  419.707799][T21905] bond65: (slave bridge46): Enslaving as an active interface with an up link
[  419.757194][T21909] openvswitch: netlink: Flow key attr not present in new flow.
[  419.763339][T21912] netlink: 'syz.2.5099': attribute type 2 has an invalid length.
[  420.123038][T21924] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  420.132990][ T8017] lo speed is unknown, defaulting to 1000
[  420.146623][ T8017] sqz0: Port: 1 Link DOWN
[  420.153597][ T8017] lo speed is unknown, defaulting to 1000
[  420.321430][T21952] netlink: 'syz.2.5113': attribute type 1 has an invalid length.
[  420.346156][T21952] bond66: (slave bridge47): making interface the new active one
[  420.349643][T21952] bond66: (slave bridge47): Enslaving as an active interface with an up link
[  420.476833][T21960] lo speed is unknown, defaulting to 1000
[  420.583098][T21960] lo speed is unknown, defaulting to 1000
[  420.653305][T21974] netlink: 'syz.0.5121': attribute type 1 has an invalid length.
[  420.784700][T21974] gretap5: entered allmulticast mode
[  420.794843][T21974] bond77: (slave gretap5): making interface the new active one
[  420.801074][T21974] bond77: (slave gretap5): Enslaving as an active interface with an up link
[  421.063261][T21986] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  421.549798][T22004] bridge0: port 2(vlan3) entered blocking state
[  421.551904][T22004] bridge0: port 2(vlan3) entered forwarding state
[  421.554034][T22004] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  421.556305][T22004] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  421.583095][T22004] hsr0: left promiscuous mode
[  421.585713][T22004] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  421.656844][T22013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  421.672910][T22008] netlink: 'syz.0.5134': attribute type 10 has an invalid length.
[  421.678230][T22008] ipvlan0: entered allmulticast mode
[  421.688733][T22008] veth0_vlan: entered allmulticast mode
[  421.735222][   T33] audit: type=1804 audit(1778603934.763:15): pid=22017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5136" name="/newroot/1606/cgroup.controllers" dev="tmpfs" ino=8181 res=1 errno=0
[  421.744118][   T33] audit: type=1800 audit(1778603934.763:16): pid=22017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5136" name="cgroup.controllers" dev="tmpfs" ino=8181 res=0 errno=0
[  422.223237][T22049] __nla_validate_parse: 10 callbacks suppressed
[  422.223249][T22049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5145'.
[  422.381009][T22060] bridge41: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  422.427535][T22064] netlink: 'syz.0.5150': attribute type 4 has an invalid length.
[  422.437630][T22064] netlink: 'syz.0.5150': attribute type 4 has an invalid length.
[  422.443881][ T8017] lo speed is unknown, defaulting to 1000
[  422.446277][ T8017] sqz0: Port: 1 Link ACTIVE
[  422.448562][ T8017] lo speed is unknown, defaulting to 1000
[  422.567627][T22068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5151'.
[  422.861443][T22072] netlink: 392 bytes leftover after parsing attributes in process `syz.2.5152'.
[  423.230655][T22080] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5154'.
[  423.432766][T22090] netlink: 392 bytes leftover after parsing attributes in process `syz.0.5157'.
[  423.599800][T22099] netlink: 392 bytes leftover after parsing attributes in process `syz.0.5159'.
[  423.680082][T22107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5161'.
[  423.860434][T22115] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5164'.
[  423.875663][T22112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5163'.
[  423.914691][T22118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5165'.
[  423.964458][T22122] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved
[  423.973243][T22121] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved
[  424.360971][T22147] tun0: tun_chr_ioctl cmd 1074812118
[  424.371364][T22147] tun0: tun_chr_ioctl cmd 1074033169
[  424.752024][T22175] ipt_rpfilter: unknown options
[  424.806815][T22180] openvswitch: netlink: Actions may not be safe on all matching packets
[  426.296729][T22284] xfrm1: entered allmulticast mode
[  426.361004][T22292] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  426.382318][T22284] sctp: [Deprecated]: syz.2.5208 (pid 22284) Use of int in maxseg socket option.
[  426.382318][T22284] Use struct sctp_assoc_value instead
[  426.515948][T22309] netlink: 'syz.1.5216': attribute type 1 has an invalid length.
[  426.541054][T22309] bond47: (slave bridge42): making interface the new active one
[  426.544145][T22309] bond47: (slave bridge42): Enslaving as an active interface with an up link
[  426.568458][T22313] netlink: 'syz.1.5217': attribute type 2 has an invalid length.
[  426.684495][T22320] netlink: 'syz.2.5220': attribute type 4 has an invalid length.
[  427.263821][T22340] vlan6: entered promiscuous mode
[  427.265638][T22340] bridge0: entered promiscuous mode
[  427.502929][T22347] netlink: 'syz.1.5227': attribute type 1 has an invalid length.
[  427.505438][T22347] __nla_validate_parse: 23 callbacks suppressed
[  427.505447][T22347] netlink: 8592 bytes leftover after parsing attributes in process `syz.1.5227'.
[  427.598192][T22349] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (32769) !
[  427.661632][T22352] netlink: 'syz.1.5229': attribute type 39 has an invalid length.
[  427.665782][T22352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5229'.
[  427.697363][T22355] netlink: 'syz.1.5231': attribute type 13 has an invalid length.
[  427.757790][T22356] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig
[  427.878750][T22372] netlink: 392 bytes leftover after parsing attributes in process `syz.2.5234'.
[  427.925433][T22377] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5235'.
[  427.933994][T22377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5235'.
[  427.950915][T22377] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  427.964229][T22377] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  427.991844][T22380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5236'.
[  428.128333][T22396] netem: change failed
[  428.131354][T22395] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  428.197607][T22399] netlink: 'syz.2.5240': attribute type 2 has an invalid length.
[  428.326375][T22412] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  428.586212][T22426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5248'.
[  428.622161][T22429] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5249'.
[  428.883631][T22440] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5253'.
[  429.004073][T22446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5255'.
[  429.050193][T22446] veth37: entered allmulticast mode
[  429.056658][T22446] bond48: (slave veth37): Enslaving as an active interface with an up link
[  429.065691][T22446] bond48 (unregistering): (slave veth37): Releasing backup interface
[  429.076122][T22446] bond48 (unregistering): Released all slaves
[  429.234130][T22456] bond48: invalid ARP target 0.0.0.0 specified for addition
[  429.237123][T22456] bond48: option arp_ip_target: invalid value (0)
[  429.243194][T22456] bond48 (unregistering): Released all slaves
[  429.273293][T22459] workqueue: Failed to create a rescuer kthread for wq "bond48": -EINTR
[  429.284913][T22468] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  429.293087][T22468] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.328599][T22476] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  429.362145][T22482] netlink: 'syz.1.5265': attribute type 7 has an invalid length.
[  429.366550][T22468] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  429.370764][T22468] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.395722][T22468] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  429.399221][T22468] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.457828][T22468] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  429.461060][T22468] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.537501][T12471] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  429.540197][T12471] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  429.548161][T12471] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  429.552386][T12471] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  429.568446][T12471] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  429.572209][T12471] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  429.587620][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  429.591561][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  432.304422][T22475] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  432.387768][T22528] openvswitch: netlink: Flow actions attr not present in new flow.
[  432.455831][T22540] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  432.459245][T22540] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  432.499112][T22540] Cannot find add_set index 2 as target
[  432.591366][T22555] __nla_validate_parse: 9 callbacks suppressed
[  432.591375][T22555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5288'.
[  432.596192][T22554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5288'.
[  432.605498][T22554] netlink: 'syz.0.5288': attribute type 13 has an invalid length.
[  432.607164][T22557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5289'.
[  432.610269][T22554] netlink: 'syz.0.5288': attribute type 17 has an invalid length.
[  432.633339][T22554] erspan0: left promiscuous mode
[  432.651055][T22554] 8021q: adding VLAN 0 to HW filter on device batadv0
[  432.691587][T22567] netlink: 'syz.1.5290': attribute type 4 has an invalid length.
[  432.694454][T22567] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5290'.
[  432.707424][T22554] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  432.713365][T22554] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  432.718297][T22554] 0: left allmulticast mode
[  432.720579][T22554] hsr_slave_0: left allmulticast mode
[  432.722725][T22554] hsr_slave_1: left allmulticast mode
[  432.727166][T22554] veth1_vlan: left promiscuous mode
[  432.730908][T22554] veth0_vlan: left promiscuous mode
[  432.733528][T22554] veth0_vlan: entered promiscuous mode
[  432.738465][T22554] veth1_vlan: entered promiscuous mode
[  432.742798][T22554] ipvlan0: left allmulticast mode
[  432.744502][T22554] veth0_vlan: left allmulticast mode
[  432.754693][T22554] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  432.778388][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  432.781980][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  432.783694][T22559] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5290'.
[  432.785300][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  432.791909][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  432.904943][T22576] netlink: 'syz.1.5295': attribute type 1 has an invalid length.
[  432.944556][T22576] 8021q: adding VLAN 0 to HW filter on device bond48
[  433.084578][T22583] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  433.192906][T22598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5301'.
[  433.310962][T22602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5302'.
[  433.597896][T22610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5303'.
[  434.034306][T22632] netlink: 'syz.2.5309': attribute type 1 has an invalid length.
[  434.071456][T22632] bond67: (slave bridge51): making interface the new active one
[  434.074421][T22632] bond67: (slave bridge51): Enslaving as an active interface with an up link
[  434.113804][T22635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5310'.
[  434.157416][T22635] IPVS: sh: FWM 3 0x00000003 - no destination available
[  434.302041][T22661] netlink: 'syz.2.5316': attribute type 1 has an invalid length.
[  434.332120][T22661] bond68: (slave bridge52): making interface the new active one
[  434.338109][T22661] bond68: (slave bridge52): Enslaving as an active interface with an up link
[  434.390870][T22670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5320'.
[  434.511919][T22682] bond79 (unregistering): Released all slaves
[  434.558338][T22687] bond69: (slave bridge53): Enslaving as an active interface with an up link
[  434.632614][T22695] netlink: 'syz.0.5327': attribute type 1 has an invalid length.
[  434.656037][T22695] bond79: (slave bridge74): making interface the new active one
[  434.661135][T22695] bond79: (slave bridge74): Enslaving as an active interface with an up link
[  435.057008][T22714] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  435.060524][T22714] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  435.213335][T22717] netlink: 'syz.1.5335': attribute type 1 has an invalid length.
[  435.237027][T22717] bond49: (slave bridge43): making interface the new active one
[  435.243351][T22717] bond49: (slave bridge43): Enslaving as an active interface with an up link
[  435.727042][T22747] netlink: 'syz.2.5342': attribute type 1 has an invalid length.
[  435.753771][T22747] bond70: (slave bridge54): making interface the new active one
[  435.761768][T22747] bond70: (slave bridge54): Enslaving as an active interface with an up link
[  435.774901][T22748] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  435.922737][T22759] bridge0: port 2(vlan3) entered disabled state
[  435.924936][T22759] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  435.947300][T22759] bridge0: port 2(vlan3) entered blocking state
[  435.949486][T22759] bridge0: port 2(vlan3) entered forwarding state
[  435.951615][T22759] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  435.953911][T22759] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  435.965404][T22759] bridge0: port 2(vlan3) entered disabled state
[  435.967570][T22759] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  436.032652][T22764] netlink: 'syz.2.5347': attribute type 13 has an invalid length.
[  436.045462][T22764] bridge0: port 2(vlan3) entered blocking state
[  436.047571][T22764] bridge0: port 2(vlan3) entered forwarding state
[  436.049814][T22764] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  436.052147][T22764] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  436.070214][T22764] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  436.208855][T22775] bridge0: port 2(vlan3) entered disabled state
[  436.211076][T22775] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  436.230809][T22775] bridge0: port 2(vlan3) entered blocking state
[  436.232957][T22775] bridge0: port 2(vlan3) entered forwarding state
[  436.235157][T22775] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  436.237511][T22775] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  436.247699][T22775] bridge0: port 2(vlan3) entered disabled state
[  436.250119][T22775] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  436.784943][T22805] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.845337][T22805] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.863966][T22814] tipc: Enabled bearer <eth:vcan0>, priority 10
[  436.874644][T22805] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.957150][T22805] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.026431][ T8970] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  437.033831][ T8970] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  437.041445][ T8970] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  437.048721][ T8970] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  437.108174][T22822] lo speed is unknown, defaulting to 1000
[  437.199531][T22822] lo speed is unknown, defaulting to 1000
[  437.305102][T22840] xt_hashlimit: size too large, truncated to 1048576
[  437.613662][T22857] __nla_validate_parse: 22 callbacks suppressed
[  437.613672][T22857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5376'.
[  437.657109][T22865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5381'.
[  437.741588][T22871] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5384'.
[  437.745285][T22871] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[  437.782356][T22871] bond50: option ad_select: invalid value (34)
[  437.785381][T22871] bond50 (unregistering): Released all slaves
[  437.869894][T22877] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5385'.
[  438.032302][T22887] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5388'.
[  438.073938][T22889] validate_nla: 2 callbacks suppressed
[  438.073950][T22889] netlink: 'syz.1.5389': attribute type 1 has an invalid length.
[  438.078197][T22889] netlink: 'syz.1.5389': attribute type 4 has an invalid length.
[  438.081708][T22889] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.5389'.
[  438.114159][T22891] netlink: 'syz.1.5390': attribute type 1 has an invalid length.
[  438.140465][T22891] bond50: (slave bridge44): making interface the new active one
[  438.143552][T22891] bond50: (slave bridge44): Enslaving as an active interface with an up link
[  438.223912][T22899] lo speed is unknown, defaulting to 1000
[  438.362875][T22899] lo speed is unknown, defaulting to 1000
[  438.432472][T22907] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5394'.
[  438.473604][T22914] netlink: 'syz.2.5396': attribute type 8 has an invalid length.
[  438.476726][T22914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5396'.
[  438.483990][T22914] veth1_to_team: entered promiscuous mode
[  438.486714][T22914] gretap0: entered promiscuous mode
[  438.489278][T22914] hsr1: entered promiscuous mode
[  439.117085][T22931] netlink: 'syz.1.5400': attribute type 1 has an invalid length.
[  439.183502][T22931] bond51: (slave bridge45): making interface the new active one
[  439.186896][T22931] bond51: (slave bridge45): Enslaving as an active interface with an up link
[  441.465153][T22913] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  441.596401][T22945] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5405'.
[  441.601683][T22945] 8021q: adding VLAN 0 to HW filter on device bond0
[  441.649248][T22950] netlink: 'syz.0.5407': attribute type 1 has an invalid length.
[  441.680706][T22950] bond80: (slave bridge75): making interface the new active one
[  441.684175][T22950] bond80: (slave bridge75): Enslaving as an active interface with an up link
[  441.715672][T22941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5403'.
[  441.720656][T22941] openvswitch: netlink: Unknown nsh attribute 0
[  441.951689][T22969] netlink: 'syz.1.5414': attribute type 1 has an invalid length.
[  442.144719][T22993] netlink: 'syz.0.5421': attribute type 39 has an invalid length.
[  442.224254][T23003] netlink: 'syz.1.5422': attribute type 2 has an invalid length.
[  442.226783][T23003] netlink: 'syz.1.5422': attribute type 2 has an invalid length.
[  442.885473][T23059] __nla_validate_parse: 14 callbacks suppressed
[  442.885484][T23059] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5433'.
[  442.898564][T23059] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5433'.
[  442.913274][T23059] bridge0: port 2(vlan3) entered blocking state
[  442.915398][T23059] bridge0: port 2(vlan3) entered forwarding state
[  442.917544][T23059] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  442.919954][T23059] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  442.928070][T23059] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5433'.
[  442.936473][T23059] bridge0: port 2(vlan3) entered disabled state
[  442.938635][T23059] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  443.056621][T23071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5436'.
[  443.103253][T23075] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5438'.
[  443.217833][T23084] netlink: 'syz.1.5440': attribute type 11 has an invalid length.
[  443.223946][T23089] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5441'.
[  443.231410][T23089] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5441'.
[  443.239966][T23089] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5441'.
[  443.293917][T23093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5442'.
[  443.305133][T23095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5444'.
[  443.988510][T23138] tipc: Resetting bearer <eth:syzkaller0>
[  443.991252][T23138] netlink: 'syz.0.5458': attribute type 12 has an invalid length.
[  444.200859][T23152] block nbd3: server does not support multiple connections per device.
[  444.209665][T23152] block nbd3: shutting down sockets
[  444.286176][T23162] : entered promiscuous mode
[  444.321361][T23167] bond71: Removing last arp target with arp_interval on
[  444.401237][T23175] 
[  444.402061][T23175] ======================================================
[  444.404250][T23175] WARNING: possible circular locking dependency detected
[  444.406386][T23175] syzkaller #0 Not tainted
[  444.407748][T23175] ------------------------------------------------------
[  444.409853][T23175] syz.2.5468/23175 is trying to acquire lock:
[  444.411694][T23175] ffff88816ecfc718 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x300
[  444.414379][T23175] 
[  444.414379][T23175] but task is already holding lock:
[  444.416609][T23175] ffff88818b975008 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450
[  444.419484][T23175] 
[  444.419484][T23175] which lock already depends on the new lock.
[  444.419484][T23175] 
[  444.422647][T23175] 
[  444.422647][T23175] the existing dependency chain (in reverse order) is:
[  444.425390][T23175] 
[  444.425390][T23175] -> #6 (&q->elevator_lock){+.+.}-{4:4}:
[  444.427797][T23175]        __mutex_lock+0x1a3/0x1550
[  444.429390][T23175]        elevator_change+0x1b3/0x450
[  444.431020][T23175]        elevator_set_none+0xb5/0x140
[  444.432707][T23175]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  444.434657][T23175]        nbd_start_device+0x17f/0xb10
[  444.436323][T23175]        nbd_genl_connect+0x165b/0x1cf0
[  444.438018][T23175]        genl_family_rcv_msg_doit+0x22a/0x330
[  444.439893][T23175]        genl_rcv_msg+0x61c/0x7a0
[  444.441450][T23175]        netlink_rcv_skb+0x232/0x4b0
[  444.443087][T23175]        genl_rcv+0x28/0x40
[  444.444505][T23175]        netlink_unicast+0x75c/0x8e0
[  444.446133][T23175]        netlink_sendmsg+0x813/0xb40
[  444.447774][T23175]        ____sys_sendmsg+0x972/0x9f0
[  444.449413][T23175]        ___sys_sendmsg+0x2a5/0x360
[  444.451028][T23175]        __x64_sys_sendmsg+0x1bd/0x2a0
[  444.452735][T23175]        do_syscall_64+0x15f/0xf80
[  444.454327][T23175]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.456355][T23175] 
[  444.456355][T23175] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  444.459019][T23175]        blk_alloc_queue+0x546/0x680
[  444.460760][T23175]        __blk_mq_alloc_disk+0x197/0x390
[  444.462513][T23175]        nbd_dev_add+0x499/0xb50
[  444.464047][T23175]        nbd_init+0x168/0x1f0
[  444.465490][T23175]        do_one_initcall+0x250/0x870
[  444.467086][T23175]        do_initcall_level+0x104/0x190
[  444.468732][T23175]        do_initcalls+0x59/0xa0
[  444.470236][T23175]        kernel_init_freeable+0x2a6/0x3e0
[  444.471948][T23175]        kernel_init+0x1d/0x1d0
[  444.473429][T23175]        ret_from_fork+0x514/0xb70
[  444.475020][T23175]        ret_from_fork_asm+0x1a/0x30
[  444.476704][T23175] 
[  444.476704][T23175] -> #4 (fs_reclaim){+.+.}-{0:0}:
[  444.479495][T23175]        fs_reclaim_acquire+0x71/0x100
[  444.481473][T23175]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  444.483420][T23175]        __alloc_skb+0x1d0/0x7d0
[  444.484964][T23175]        __ip6_append_data+0x2d3c/0x3f60
[  444.486703][T23175]        ip6_append_data+0x10f/0x280
[  444.488373][T23175]        rawv6_sendmsg+0x12d3/0x18e0
[  444.489997][T23175]        ____sys_sendmsg+0x80a/0x9f0
[  444.491665][T23175]        ___sys_sendmsg+0x2a5/0x360
[  444.493305][T23175]        __x64_sys_sendmsg+0x1bd/0x2a0
[  444.494996][T23175]        do_syscall_64+0x15f/0xf80
[  444.496671][T23175]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.498723][T23175] 
[  444.498723][T23175] -> #3 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  444.501159][T23175]        lock_sock_nested+0x41/0x100
[  444.502808][T23175]        inet_shutdown+0x6a/0x390
[  444.504418][T23175]        nbd_mark_nsock_dead+0x2e9/0x560
[  444.506152][T23175]        sock_shutdown+0x15e/0x260
[  444.507757][T23175]        nbd_clear_sock+0x24/0x170
[  444.509368][T23175]        nbd_config_put+0x2dd/0x580
[  444.511124][T23175]        nbd_genl_connect+0x19d5/0x1cf0
[  444.512897][T23175]        genl_family_rcv_msg_doit+0x22a/0x330
[  444.514819][T23175]        genl_rcv_msg+0x61c/0x7a0
[  444.516412][T23175]        netlink_rcv_skb+0x232/0x4b0
[  444.518089][T23175]        genl_rcv+0x28/0x40
[  444.519520][T23175]        netlink_unicast+0x75c/0x8e0
[  444.521131][T23175]        netlink_sendmsg+0x813/0xb40
[  444.522727][T23175]        ____sys_sendmsg+0x972/0x9f0
[  444.524399][T23175]        ___sys_sendmsg+0x2a5/0x360
[  444.525984][T23175]        __x64_sys_sendmsg+0x1bd/0x2a0
[  444.527604][T23175]        do_syscall_64+0x15f/0xf80
[  444.529209][T23175]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.531267][T23175] 
[  444.531267][T23175] -> #2 (&nsock->tx_lock){+.+.}-{4:4}:
[  444.533689][T23175]        __mutex_lock+0x1a3/0x1550
[  444.535303][T23175]        nbd_queue_rq+0x37b/0x1100
[  444.536894][T23175]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  444.538795][T23175]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  444.540914][T23175]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  444.542920][T23175]        blk_mq_run_hw_queue+0x348/0x4f0
[  444.544690][T23175]        blk_mq_dispatch_list+0xd16/0xe10
[  444.546497][T23175]        blk_mq_flush_plug_list+0x48d/0x570
[  444.548386][T23175]        __blk_flush_plug+0x3ed/0x4d0
[  444.550047][T23175]        __submit_bio+0x28d/0x580
[  444.551629][T23175]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  444.553554][T23175]        block_read_full_folio+0x599/0x830
[  444.555396][T23175]        filemap_read_folio+0x137/0x3b0
[  444.557127][T23175]        do_read_cache_folio+0x358/0x590
[  444.558873][T23175]        read_part_sector+0xb6/0x2b0
[  444.560521][T23175]        adfspart_check_ICS+0xb1/0x960
[  444.562266][T23175]        bdev_disk_changed+0x817/0x1770
[  444.564007][T23175]        blkdev_get_whole+0x380/0x510
[  444.565683][T23175]        bdev_open+0x31e/0xd30
[  444.567140][T23175]        blkdev_open+0x470/0x610
[  444.568663][T23175]        do_dentry_open+0x785/0x14e0
[  444.570323][T23175]        vfs_open+0x3b/0x340
[  444.571779][T23175]        path_openat+0x2e08/0x3860
[  444.573429][T23175]        do_file_open+0x23e/0x4a0
[  444.575150][T23175]        do_sys_openat2+0x113/0x200
[  444.576846][T23175]        __x64_sys_openat+0x138/0x170
[  444.578511][T23175]        do_syscall_64+0x15f/0xf80
[  444.580129][T23175]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.582148][T23175] 
[  444.582148][T23175] -> #1 (&cmd->lock){+.+.}-{4:4}:
[  444.584421][T23175]        __mutex_lock+0x1a3/0x1550
[  444.586043][T23175]        nbd_queue_rq+0xc6/0x1100
[  444.587701][T23175]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  444.589578][T23175]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  444.591694][T23175]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  444.593723][T23175]        blk_mq_run_hw_queue+0x348/0x4f0
[  444.595435][T23175]        blk_mq_dispatch_list+0xd16/0xe10
[  444.597132][T23175]        blk_mq_flush_plug_list+0x48d/0x570
[  444.598977][T23175]        __blk_flush_plug+0x3ed/0x4d0
[  444.600587][T23175]        __submit_bio+0x28d/0x580
[  444.602185][T23175]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  444.604129][T23175]        block_read_full_folio+0x599/0x830
[  444.605919][T23175]        filemap_read_folio+0x137/0x3b0
[  444.607625][T23175]        do_read_cache_folio+0x358/0x590
[  444.609382][T23175]        read_part_sector+0xb6/0x2b0
[  444.611039][T23175]        adfspart_check_ICS+0xb1/0x960
[  444.612792][T23175]        bdev_disk_changed+0x817/0x1770
[  444.614509][T23175]        blkdev_get_whole+0x380/0x510
[  444.616181][T23175]        bdev_open+0x31e/0xd30
[  444.617679][T23175]        blkdev_open+0x470/0x610
[  444.619221][T23175]        do_dentry_open+0x785/0x14e0
[  444.620853][T23175]        vfs_open+0x3b/0x340
[  444.622326][T23175]        path_openat+0x2e08/0x3860
[  444.623942][T23175]        do_file_open+0x23e/0x4a0
[  444.625499][T23175]        do_sys_openat2+0x113/0x200
[  444.627114][T23175]        __x64_sys_openat+0x138/0x170
[  444.628780][T23175]        do_syscall_64+0x15f/0xf80
[  444.630386][T23175]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.632379][T23175] 
[  444.632379][T23175] -> #0 (set->srcu){.+.+}-{0:0}:
[  444.634565][T23175]        __lock_acquire+0x15a5/0x2cf0
[  444.636248][T23175]        lock_sync+0x9d/0x120
[  444.637670][T23175]        __synchronize_srcu+0xca/0x300
[  444.639368][T23175]        elevator_switch+0x1e8/0x7a0
[  444.641014][T23175]        elevator_change+0x2cc/0x450
[  444.642718][T23175]        elevator_set_default+0x36c/0x430
[  444.644516][T23175]        blk_register_queue+0x3e9/0x4e0
[  444.646224][T23175]        __add_disk+0x677/0xd50
[  444.647746][T23175]        add_disk_fwnode+0xfb/0x480
[  444.649393][T23175]        nbd_dev_add+0x72c/0xb50
[  444.650949][T23175]        nbd_genl_connect+0x962/0x1cf0
[  444.652692][T23175]        genl_family_rcv_msg_doit+0x22a/0x330
[  444.654584][T23175]        genl_rcv_msg+0x61c/0x7a0
[  444.656153][T23175]        netlink_rcv_skb+0x232/0x4b0
[  444.657778][T23175]        genl_rcv+0x28/0x40
[  444.659222][T23175]        netlink_unicast+0x75c/0x8e0
[  444.660871][T23175]        netlink_sendmsg+0x813/0xb40
[  444.662538][T23175]        ____sys_sendmsg+0x972/0x9f0
[  444.664205][T23175]        ___sys_sendmsg+0x2a5/0x360
[  444.665806][T23175]        __x64_sys_sendmsg+0x1bd/0x2a0
[  444.667463][T23175]        do_syscall_64+0x15f/0xf80
[  444.669086][T23175]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.671048][T23175] 
[  444.671048][T23175] other info that might help us debug this:
[  444.671048][T23175] 
[  444.674170][T23175] Chain exists of:
[  444.674170][T23175]   set->srcu --> &q->q_usage_counter(io)#49 --> &q->elevator_lock
[  444.674170][T23175] 
[  444.678326][T23175]  Possible unsafe locking scenario:
[  444.678326][T23175] 
[  444.680610][T23175]        CPU0                    CPU1
[  444.682267][T23175]        ----                    ----
[  444.683931][T23175]   lock(&q->elevator_lock);
[  444.685377][T23175]                                lock(&q->q_usage_counter(io)#49);
[  444.687779][T23175]                                lock(&q->elevator_lock);
[  444.689962][T23175]   sync(set->srcu);
[  444.691198][T23175] 
[  444.691198][T23175]  *** DEADLOCK ***
[  444.691198][T23175] 
[  444.693686][T23175] 6 locks held by syz.2.5468/23175:
[  444.695313][T23175]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  444.697817][T23175]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  444.700544][T23175]  #2: ffff88818b2989c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x480
[  444.703703][T23175]  #3: ffff88818b975090 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x119/0x4e0
[  444.706733][T23175]  #4: ffff88818b974b18 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: elevator_change+0x198/0x450
[  444.710064][T23175]  #5: ffff88818b975008 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450
[  444.713105][T23175] 
[  444.713105][T23175] stack backtrace:
[  444.714948][T23175] CPU: 1 UID: 0 PID: 23175 Comm: syz.2.5468 Not tainted syzkaller #0 PREEMPT(full) 
[  444.714959][T23175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  444.714964][T23175] Call Trace:
[  444.714970][T23175]  <TASK>
[  444.714975][T23175]  dump_stack_lvl+0xe8/0x150
[  444.714985][T23175]  print_circular_bug+0x2e1/0x300
[  444.714997][T23175]  check_noncircular+0x12e/0x150
[  444.715008][T23175]  __lock_acquire+0x15a5/0x2cf0
[  444.715018][T23175]  ? lockdep_unlock+0x5d/0xd0
[  444.715025][T23175]  ? __lock_acquire+0x146e/0x2cf0
[  444.715035][T23175]  ? __synchronize_srcu+0xb6/0x300
[  444.715043][T23175]  lock_sync+0x9d/0x120
[  444.715050][T23175]  ? __synchronize_srcu+0xb6/0x300
[  444.715059][T23175]  __synchronize_srcu+0xca/0x300
[  444.715085][T23175]  ? do_raw_spin_lock+0x12b/0x2f0
[  444.715097][T23175]  ? __pfx___synchronize_srcu+0x10/0x10
[  444.715105][T23175]  ? kvm_clock_get_cycles+0x47/0x60
[  444.715116][T23175]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  444.715127][T23175]  ? synchronize_srcu+0x20d/0x270
[  444.715135][T23175]  elevator_switch+0x1e8/0x7a0
[  444.715145][T23175]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  444.715152][T23175]  elevator_change+0x2cc/0x450
[  444.715163][T23175]  ? do_raw_spin_unlock+0x4d/0x210
[  444.715174][T23175]  elevator_set_default+0x36c/0x430
[  444.715191][T23175]  ? __pfx_elevator_set_default+0x10/0x10
[  444.715203][T23175]  ? disk_register_independent_access_ranges+0x2db/0x380
[  444.715212][T23175]  ? blk_crypto_sysfs_register+0x11c/0x170
[  444.715222][T23175]  blk_register_queue+0x3e9/0x4e0
[  444.715231][T23175]  __add_disk+0x677/0xd50
[  444.715241][T23175]  ? down_read+0x270/0x2e0
[  444.715249][T23175]  add_disk_fwnode+0xfb/0x480
[  444.715257][T23175]  nbd_dev_add+0x72c/0xb50
[  444.715265][T23175]  ? __pfx_nbd_dev_add+0x10/0x10
[  444.715275][T23175]  ? bpf_lsm_capable+0x9/0x20
[  444.715283][T23175]  ? security_capable+0x7e/0x2c0
[  444.715292][T23175]  ? radix_tree_lookup+0x25c/0x290
[  444.715302][T23175]  nbd_genl_connect+0x962/0x1cf0
[  444.715309][T23175]  ? __pfx___nla_validate_parse+0x10/0x10
[  444.715322][T23175]  ? __pfx_nbd_genl_connect+0x10/0x10
[  444.715329][T23175]  ? rcu_is_watching+0x15/0xb0
[  444.715338][T23175]  ? trace_kmalloc+0x2a/0xf0
[  444.715348][T23175]  ? __nla_parse+0x40/0x60
[  444.715358][T23175]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  444.715366][T23175]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  444.715375][T23175]  genl_family_rcv_msg_doit+0x22a/0x330
[  444.715385][T23175]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  444.715394][T23175]  ? __lock_acquire+0x6b5/0x2cf0
[  444.715403][T23175]  genl_rcv_msg+0x61c/0x7a0
[  444.715411][T23175]  ? __pfx_genl_rcv_msg+0x10/0x10
[  444.715418][T23175]  ? __pfx_nbd_genl_connect+0x10/0x10
[  444.715427][T23175]  netlink_rcv_skb+0x232/0x4b0
[  444.715437][T23175]  ? __pfx_genl_rcv_msg+0x10/0x10
[  444.715444][T23175]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  444.715456][T23175]  ? down_read+0x270/0x2e0
[  444.715462][T23175]  ? genl_rcv+0xd/0x40
[  444.715469][T23175]  genl_rcv+0x28/0x40
[  444.715476][T23175]  netlink_unicast+0x75c/0x8e0
[  444.715486][T23175]  netlink_sendmsg+0x813/0xb40
[  444.715498][T23175]  ? __pfx_netlink_sendmsg+0x10/0x10
[  444.715508][T23175]  ? aa_sock_msg_perm+0xf1/0x1b0
[  444.715518][T23175]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  444.715528][T23175]  ____sys_sendmsg+0x972/0x9f0
[  444.715538][T23175]  ? __might_fault+0xaf/0x130
[  444.715548][T23175]  ? __pfx_____sys_sendmsg+0x10/0x10
[  444.715559][T23175]  ? import_iovec+0x73/0xa0
[  444.715570][T23175]  ___sys_sendmsg+0x2a5/0x360
[  444.715579][T23175]  ? __lock_acquire+0x6b5/0x2cf0
[  444.715587][T23175]  ? __pfx____sys_sendmsg+0x10/0x10
[  444.715598][T23175]  ? futex_wake+0x4ac/0x580
[  444.715612][T23175]  ? __fget_files+0x2a/0x420
[  444.715620][T23175]  ? __fget_files+0x3a0/0x420
[  444.715629][T23175]  __x64_sys_sendmsg+0x1bd/0x2a0
[  444.715640][T23175]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  444.715651][T23175]  ? rcu_is_watching+0x15/0xb0
[  444.715660][T23175]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.715668][T23175]  do_syscall_64+0x15f/0xf80
[  444.715674][T23175]  ? trace_irq_disable+0x3b/0x140
[  444.715685][T23175]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.715692][T23175] RIP: 0033:0x7fd3be99cdd9
[  444.715702][T23175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  444.715708][T23175] RSP: 002b:00007fd3bf841028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  444.715717][T23175] RAX: ffffffffffffffda RBX: 00007fd3bec15fa0 RCX: 00007fd3be99cdd9
[  444.715722][T23175] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000009
[  444.715727][T23175] RBP: 00007fd3bea32d69 R08: 0000000000000000 R09: 0000000000000000
[  444.715732][T23175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  444.715736][T23175] R13: 00007fd3bec16038 R14: 00007fd3bec15fa0 R15: 00007fff4010e388
[  444.715745][T23175]  </TASK>
[  444.895030][T23178] nbd: nbd64 already in use
